Description
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | centericq | 4.20.0-8etch1 | DTSA-2-1 |
| Debian 4.0 | ekg | 1:1.7~rc2-1etch1 | DSA-1318-1 |
| Debian 4.0 | gaim | 1:1.4.0-5etch2 | DTSA-5-1 |
| Debian 3.1 | centericq | 4.20.0-1sarge2 | DSA-813-1 |
| Debian 3.1 | ekg | 1:1.5+20050411-7 | DSA-1318-1 |
| Debian 3.1 | gaim | 1:1.2.1-1.4 | DSA-769-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kdenetwork +2 | 7:3.3.1-2.3 | RHSA-2005:639 |
Advisories 6
- RHSA-2005:639 Red Hat Security Advisory: kdenetwork security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-769-1 gaim - memory alignment bug Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-813-1 centericq - several Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-2-1 centericq - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-5-1 gaim - multiple remote vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1318-1 ekg Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://gaim.sourceforge.net/security/index.php?id=20
- FLSA:158543 vendor-advisory
- 24600 vdb-entry
- 20050721 Multiple vulnerabilities in libgadu and ekg package mailing-list
- 16265 third-party-advisory
- DSA-813 vendor-advisory
- DSA-1318 vendor-advisory
- RHSA-2005:627 vendor-advisory
- oval:org.mitre.oval:def:10456 vdb-entry signature