Summary
It was discovered that MCabber does not properly manage roster pushes. An
attacker could possibly use this issue to remotely perform
machine-in-the-middle attacks. (CVE-2016-9928).
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | mcabber | 0.10.2-1+deb8u1build0.16.04.1 |
Vulnerabilities 1
-
Unscored —
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, o…
References
-
report
https://ubuntu.com/security/CVE-2016-9928