SASL password overflow via integer overflow

libcurl contains a buffer overrun in the SASL authentication code. The internal function Curlauthcreateplainmessage fails to correctly verify that the passed in lengths for name and password are not too long, then calculates a buffer size to allocate. On systems with a 32-bit sizet, the math to...

PT-2018-1976

Name of the Vulnerable Software and Affected Versions Curl versions 7.33.0 through 7.61.1 Description The issue is related to a buffer overrun in the SASL authentication code, which may lead to denial of service. This buffer overrun is located in the Curl auth create plain message function and...

Oracle Solaris Third-Party Patch Update : pidgin (multiple_vulnerabilities_in_pidgin)

The remote Solaris system is missing necessary patches to address security updates : - proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash vi...

PT-2012-3949

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.4 Description The issue is related to the MSN protocol plugin in libpurple, where crafted characters in a text/plain message can cause a denial of service, resulting in an application crash. Recommendations For...