CVE-2014-0020
CVE-2014-0020
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.
EPSS 2.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html
- http://hg.pidgin.im/pidgin/main/rev/a167504359e5
- https://rhn.redhat.com/errata/RHSA-2014-0139.html
- http://hg.pidgin.im/pidgin/main/rev/9f132a6855cd
- http://www.debian.org/security/2014/dsa-2859
- http://pidgin.im/news/security/?id=85
- http://hg.pidgin.im/pidgin/main/rev/4d9be297d399
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html
- http://hg.pidgin.im/pidgin/main/rev/6b0e0566af20
- http://www.ubuntu.com/usn/USN-2100-1
- http://hg.pidgin.im/pidgin/main/rev/7d0fb0c6d8d4
- http://hg.pidgin.im/pidgin/main/rev/5845d9fa7084
- https://nvd.nist.gov/vuln/detail/CVE-2014-0020