CVE-2016-10189

CVE-2016-10189 affects BitlBee; prior to version 3.5, a remote attacker can trigger a NULL pointer dereference via a file transfer request for a contact not in the list, leading to a crash and possible arbitrary code execution. Public advisories (Debian DSA-3853/DSA-3853-1, Mageia MGASA-2017-0200...

CVE-2017-5668: NULL Pointer Dereference

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2016-10188: Use After Free

Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service crash or possibly execute arbitrary code by causing a file transfer connection to expire...

PT-2017-7794

Name of the Vulnerable Software and Affected Versions bitlbee-libpurple versions prior to 3.5 Description The issue is related to a use-after-free vulnerability that can be triggered by remote servers, potentially leading to a denial of service crash or possibly the execution of arbitrary code...

PT-2017-16659

Name of the Vulnerable Software and Affected Versions bitlbee-libpurple versions prior to 3.5.1 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, and possibly execute arbitrary code. This can be achieved via a file...

CVE-2016-10189: NULL Pointer Dereference

BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...

PT-2017-7795

Name of the Vulnerable Software and Affected Versions BitlBee versions prior to 3.5 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, and possibly execute arbitrary code. This can be achieved via a file transfer request...

openSUSE Security Update : bitlbee (openSUSE-2017-328)

This update for bitlbee fixes the following security issues : - A file transfer request from a contact not in the contact list could have resulted in a NULL pointer dereference, causing remote DoS by malicious remote clients CVE-2016-10189, bnc1022498. %NASLMINLEVEL 70300 C Tenable Network...

Debian DLA-832-1 : bitlbee security update

CVE-2017-5668 Fix for incomplete fix for 'NULL pointer dereference with file transfer request from unknown contacts'. Though this package wasn't in Wheezy with this issue, I mention it here. The fix was done with the second patch for CVE-2016-10189 CVE-2016-10189 NULL pointer dereference with fil...

[SECURITY] [DLA 832-1] bitlbee security update

Package : bitlbee Version : 3.0.5-1.2+deb7u1 CVE ID : CVE-2016-10188 CVE-2016-10189 CVE-2017-5668 CVE-2017-5668 Fix for incomplete fix for "Null pointer dereference with file transfer request from unknown contacts". Though this package wasnt in Wheezy with this issue, I mention it here. The fix w...

DLA-832-1 bitlbee - security update

Bulletin has no description...

Fedora Update for bitlbee FEDORA-2017-6694f5cd3a

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for bitlbee FEDORA-2017-deb82f0c0d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : bitlbee (2017-6694f5cd3a)

BitlBee 3.5.1 30 Jan 2017 =========================== - purple: Fix crash on file transfer requests from unknown contacts. This was the result of an incomplete fix in the previous release and may result in remote DoS. Read the full security advisory at: https://bugs.bitlbee.org/ticket/1282 - Afte...

bitlbee-libpurple Denial of Service Vulnerability

bitlbee is an irc server. libpurple is one of the libraries used to develop IM instant messaging programs. A denial of service vulnerability exists in bitlbee-libpurple. An attacker can exploit this vulnerability to cause a denial of service...

BitlBee Incomplete Fix for Denial of Service Vulnerability

BitlBee is an irc server. A denial of service vulnerability exists in BitlBee. An attacker can exploit this vulnerability to cause the application to crash, resulting in a denial of service...

BitlBee Denial of Service Vulnerability

BitlBee is an irc server. A denial of service vulnerability exists in BitlBee. An attacker could exploit this vulnerability to cause a denial of service...

[SECURITY] Fedora 24 Update: bitlbee-3.5.1-1.fc24

Bitlbee is an IRC to other chat networks gateway. Bitlbee can be used as an IRC server which forwards everything you say to people on other chat networks like XMPP/Jabber including Google Talk and Hipchat, MSN/Skype, AIM and ICQ, the Twitter microblogging network and all other Twitter API...

[SECURITY] Fedora 25 Update: bitlbee-3.5.1-1.fc25

Bitlbee is an IRC to other chat networks gateway. Bitlbee can be used as an IRC server which forwards everything you say to people on other chat networks like XMPP/Jabber including Google Talk and Hipchat, MSN/Skype, AIM and ICQ, the Twitter microblogging network and all other Twitter API...

Fedora 25 : bitlbee (2017-deb82f0c0d)

BitlBee 3.5.1 30 Jan 2017 =========================== - purple: Fix crash on file transfer requests from unknown contacts. This was the result of an incomplete fix in the previous release and may result in remote DoS. Read the full security advisory at: https://bugs.bitlbee.org/ticket/1282 - Afte...