CVE-2011-4922

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in...

2.1 LowFix available

CVE-2011-4922 is a low vulnerability (CVSS 2.1) in Pidgin, published August 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in pidgin 2.7.11-1.

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.

Exploit likelihood

0.31%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2011-4922
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-4922
Updated: 2026-11-02

EUVDEUVD-2011-4833 No score

Record: EUVD-2011-4833
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g255-9j94-9w77 No score

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in...

Record: GHSA-g255-9j94-9w77
Weakness: CWE-200
Updated: 2026-11-02

OSV No score

Record: CVE-2011-4922
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-4922 No score

Record: DEBIAN-CVE-2011-4922
Updated: 2026-11-02

Affected products

pidgin

Affected packages

Affected packages
Package	Affected	Fixed
`pidgin` Debian:12	before 2.7.11-1	2.7.11-1
`pidgin` Debian:13	before 2.7.11-1	2.7.11-1
`pidgin` Debian:14	before 2.7.11-1	2.7.11-1
`finch` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`finch-devel` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-devel` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-perl` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-tcl` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6

Show 26 moreShow less

Affected packages
Package	Affected	Fixed
`pidgin-devel` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-docs` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-perl` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple` Red Hat:enterprise_linux:6::client	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`finch` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`finch-devel` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-devel` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-perl` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-tcl` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-devel` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-docs` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-perl` Red Hat:enterprise_linux:6::server	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`finch` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`finch-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-perl` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple-tcl` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-docs` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`pidgin-perl` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6
`libpurple` Red Hat:enterprise_linux:6::workstation	before 0:2.7.9-3.el6	0:2.7.9-3.el6

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 14 moreShow less