CVE-2011-1000
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8...
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
Exploit likelihood
What each source reports
NVD Score used
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
CVE-2011-1000- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
CVE-2011-1000- Updated
- 2026-11-02
EUVDEUVD-2011-1017 No score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
EUVD-2011-1017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vjf4-chxp-cg8g No score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8...
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
GHSA-vjf4-chxp-cg8g- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10079-1 No score
telepathy-gabble-0.18.3-1.10 on GA media
These are all security issues fixed in the telepathy-gabble-0.18.3-1.10 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10079-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
telepathy-gabbleDebian:6.0 |
before 0.9.15-1+squeeze1, plus listed versions 0.9.15-1 |
0.9.15-1+squeeze1 |
telepathy-gabbleDebian:5.0 |
before 0.7.6-1+lenny1, plus listed versions 0.7.6-1 |
0.7.6-1+lenny1 |
telepathy-gabbleopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 0.18.3-1.10 | 0.18.3-1.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1000 is a medium vulnerability (CVSS 6.4) in Freedesktop Telepathy Gabble, published February 16, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.90%, the 87th percentile. Fixed in telepathy-gabble 0.9.15-1+squeeze1.
References
vupen.com/english/advisories/2011/0901
secunia.com/advisories/43316
bugs.freedesktop.org/show_bug.cgi?id=34048
exchange.xforce.ibmcloud.com/vulnerabilities/65523
Show 20 moreShow less
openwall.com/lists/oss-security/2011/02/17/4
ubuntu.com/usn/USN-1067-1
lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html
hermes.opensuse.org/messages/7848248
debian.org/security/2011/dsa-2169
securityfocus.com/bid/46440
nvd.nist.gov/vuln/detail/CVE-2011-1000
github.com/advisories/GHSA-vjf4-chxp-cg8g
suse.com/security/cve/CVE-2011-1000