Description
Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | gaim | 1:0.58-2.5 | DSA-716-1 |
Advisories 1
- DSA-716-1 gaim - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
References
- FLSA:158543 vendor-advisory
- VU#839280 third-party-advisory
- http://gaim.sourceforge.net/security/index.php?id=10
- oval:org.mitre.oval:def:10433 vdb-entry signature
- GLSA-200503-03 vendor-advisory
- 20050225 [USN-85-1] Gaim vulnerabilities mailing-list
- MDKSA-2005:049 vendor-advisory
- CLA-2005:933 vendor-advisory
- RHSA-2005:432 vendor-advisory
- 14322 third-party-advisory
- RHSA-2005:215 vendor-advisory
- 12589 vdb-entry
- gaim-snac-dos(19380) vdb-entry
- DSA-716 vendor-advisory
- SUSE-SA:2005:036 vendor-advisory