CVEvulnerability
CVE-2016-2368
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-01-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.
Affected configurations
• pidgin pidgin (<= 2.10.12)
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.10
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.debian.org/security/2016/dsa-3620 Third Party Advisory
- http://www.pidgin.im/news/security/?id=101 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91335 Third Party Advisory, VDB Entry
- http://www.talosintelligence.com/reports/TALOS-2016-0136/ Technical Description, Third Party Advisory
- http://www.ubuntu.com/usn/USN-3031-1 Third Party Advisory
- https://security.gentoo.org/glsa/201701-38 security.gentoo.org
- http://www.debian.org/security/2016/dsa-3620 Third Party Advisory
- http://www.pidgin.im/news/security/?id=101 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91335 Third Party Advisory, VDB Entry
- http://www.talosintelligence.com/reports/TALOS-2016-0136/ Technical Description, Third Party Advisory
- http://www.ubuntu.com/usn/USN-3031-1 Third Party Advisory
- https://security.gentoo.org/glsa/201701-38 security.gentoo.org