Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

[SECURITY] [DSA 4524-1] dino-im security update

🗓️ 16 Sep 2019 19:46:42Reported by DebianType 
debian
 debian🔗 lists.debian.org👁 116 Views

Security update for dino-im XMPP client fixing spoofing, roster manipulation, and unauthorised message sending

Related
Packages
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the client’s /xep/0313_message_archive_management.vala module for instant messaging between dino users, related to insufficient input data validation, allows a perpetrator to compromise the integrity of the data.
17 Dec 201900:00
–bdu_fstec
BDU FSTEC		The vulnerability of the client’s /roster/module.val module for instant messaging between dinosaurs, related to incorrect authorization, allows a violator to compromise data integrity.
17 Dec 201900:00
–bdu_fstec
BDU FSTEC		The vulnerability of the /xep/0280_message_carbons.vala client module for exchanging instant messages with dino, related to insufficient validation of input data, allows a perpetrator to compromise the integrity of the data.
17 Dec 201900:00
–bdu_fstec
CVE		CVE-2019-16235
11 Sep 201918:57
–cve
CVE		CVE-2019-16236
11 Sep 201918:57
–cve
CVE		CVE-2019-16237
11 Sep 201918:56
–cve
Cvelist		CVE-2019-16235
11 Sep 201918:57
–cvelist
Cvelist		CVE-2019-16236
11 Sep 201918:57
–cvelist
Cvelist		CVE-2019-16237
11 Sep 201918:56
–cvelist
Debian CVE		CVE-2019-16235
11 Sep 201918:57
–debiancve
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian10anydino-im0.0.git20181129-1+deb10u1dino-im_0.0.git20181129-1+deb10u1_any.deb
Debian10anydino-im-common0.0.git20181129-1+deb10u1dino-im-common_0.0.git20181129-1+deb10u1_any.deb
Debian10amd64dino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_amd64.deb
Debian10arm64dino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_arm64.deb
Debian10armeldino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_armel.deb
Debian10armhfdino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_armhf.deb
Debian10i386dino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_i386.deb
Debian10mipsdino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_mips.deb
Debian10mips64eldino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_mips64el.deb
Debian10mipseldino-im-dbgsym0.0.git20181129-1+deb10u1dino-im-dbgsym_0.0.git20181129-1+deb10u1_mipsel.deb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Sep 2019 19:46Current
8High risk
Vulners AI Score8
CVSS 25
CVSS 3.17.5
EPSS0.02385
dino-imxmpp clientsecurity updatespoofingroster manipulationunauthorised sending
116