Denial Of Service (DoS)

2020-04-1000:36:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

pidgin is vulnerable to denial of service. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially-crafted IQ error response that would crash Pidgin.

CPENameOperatorVersion
pidgineq2.5.8__1.el4
pidgineq2.3.1__2.el4
pidgineq2.5.5__3.el5
pidgineq1.5.1__1.el4
pidgineq2.5.9__1.el5
pidgineq2.5.5__1.el4
pidgineq2.0.2__3.el5
pidgineq2.3.1__1.el5
pidgineq2.5.5__2.el4
pidgineq2.5.5__1.el5

Name	Operator	Version
pidgin	eq	2.5.8__1.el4
pidgin	eq	2.3.1__2.el4
pidgin	eq	2.5.5__3.el5
pidgin	eq	1.5.1__1.el4
pidgin	eq	2.5.9__1.el5
pidgin	eq	2.5.5__1.el4
pidgin	eq	2.0.2__3.el5
pidgin	eq	2.3.1__1.el5
pidgin	eq	2.5.5__2.el4
pidgin	eq	2.5.5__1.el5