Denial Of Service (DoS)

2020-04-1000:36:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

Pidgin is vulnerable to Denial of Service (DoS). A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially-crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash).

CPENameOperatorVersion
pidgineq1.5.1__4.el3
pidgineq2.5.8__1.el4
pidgineq2.3.1__2.el4
pidgineq2.5.5__3.el5
pidgineq1.5.1__1.el4
pidgineq2.5.9__1.el5
pidgineq2.5.5__1.el4
pidgineq2.0.2__3.el5
pidgineq2.3.1__1.el5
pidgineq2.5.5__2.el4

Name	Operator	Version
pidgin	eq	1.5.1__4.el3
pidgin	eq	2.5.8__1.el4
pidgin	eq	2.3.1__2.el4
pidgin	eq	2.5.5__3.el5
pidgin	eq	1.5.1__1.el4
pidgin	eq	2.5.9__1.el5
pidgin	eq	2.5.5__1.el4
pidgin	eq	2.0.2__3.el5
pidgin	eq	2.3.1__1.el5
pidgin	eq	2.5.5__2.el4