Description
The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pidgin | 2.10.0-1 | — |
| Debian 13 | pidgin | 2.10.0-1 | — |
| Debian 12 | pidgin | 2.10.0-1 | — |
References
- http://pidgin.im/news/security/?id=53
- http://developer.pidgin.im/viewmtn/revision/info/5c2dba4a7e2e76b76e7f472b88953a4316706d43
- [oss-security] 20110822 Re: CVE request: Pidgin crash mailing-list
- 45663 third-party-advisory
- oval:org.mitre.oval:def:18005 vdb-entry signature
- pidgin-irc-protocol-dos(69340) vdb-entry
- 45916 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=722939
- 49268 vdb-entry
- http://developer.pidgin.im/viewmtn/revision/diff/5749f9193063800d27bef75c2388f6f9cc2f7f37/with/5c2dba4a7e2e76b76e7f472b88953a4316706d43/libpurple/protocols/irc/msgs.c
- 1025961 vdb-entry
- [oss-security] 20110820 CVE request: Pidgin crash mailing-list