MEDIUM
pidgin DoS when decrypting qq packets
Published May 26, 2009
5.0
MEDIUMCVSS 2.0
EPSS 2.54%
Description
Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.
Affected products
No data.
OR
- ≤ 2.5.5
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.2
- 2.1.0
- 2.1.1
- 2.2.0
- 2.2.1
- 2.2.2
- 2.3.0
- 2.3.1
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 2.5.0
- 2.5.1
- 2.5.2
- 2.5.3
- 2.5.4
No data.
Red Hat Enterprise Linux 4
pidgin-0:2.5.5-2.el4
Fixed · RHSA-2009:1060
Red Hat Enterprise Linux 5
pidgin-0:2.5.5-3.el5
Fixed · RHSA-2009:1060
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | pidgin-0:2.5.5-2.el4 | Fixed | RHSA-2009:1060 |
| Red Hat Enterprise Linux 5 | pidgin-0:2.5.5-3.el5 | Fixed | RHSA-2009:1060 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (22)
- http://secunia.com/advisories/35188 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35194 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35202 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35294 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35329 third-party-advisoryx_refsource_SECUNIA
- http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml vendor-advisoryx_refsource_GENTOO
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 vendor-advisoryx_refsource_MANDRIVA
- http://www.pidgin.im/news/security/?id=30 x_refsource_CONFIRMPatchVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1060.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/35067 vdb-entryx_refsource_BIDPatch
- http://www.ubuntu.com/usn/USN-781-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2009/1396 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2009-1374 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=500490 x_refsource_CONFIRMIssue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50684 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2009-1374
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654 vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2009-1374
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published May 26, 2009
Updated Aug 7, 2024
Reserved Apr 23, 2009
Link CVE-2009-1374
CISA Vulnrichment
Updated n/a