CVE-2011-1000
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8...
CVE-2011-1000 is a medium vulnerability (CVSS 6.4) in Freedesktop Telepathy Gabble, published February 16, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.90%, the 87th percentile. Fixed in telepathy-gabble 0.9.15-1+squeeze1.
- Severity
- 6.4 MediumCVSS 2.0, NVD
- Exploit chance
- 2.90%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.9.15-1+squeeze1telepathy-gabble +2 more
Description
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
telepathy-gabbleDebian:6.0 | before 0.9.15-1+squeeze1, plus listed versions 0.9.15-1 | 0.9.15-1+squeeze1 |
telepathy-gabbleDebian:5.0 | before 0.7.6-1+lenny1, plus listed versions 0.7.6-1 | 0.7.6-1+lenny1 |
telepathy-gabbleopenSUSE:Tumbleweed From an advisory covering 2 CVEs | before 0.18.3-1.10 | 0.18.3-1.10 |
What each source reports
NVD Score used
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
CVE-2011-1000- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
CVE-2011-1000- Updated
- 2026-11-02
EUVDEUVD-2011-1017No score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
EUVD-2011-1017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vjf4-chxp-cg8gNo score
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8...
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- Record
GHSA-vjf4-chxp-cg8g- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10079-1No score
telepathy-gabble-0.18.3-1.10 on GA media
These are all security issues fixed in the telepathy-gabble-0.18.3-1.10 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10079-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2011/0901
secunia.com/advisories/43316
bugs.freedesktop.org/show_bug.cgi?id=34048
exchange.xforce.ibmcloud.com/vulnerabilities/65523
Show 20 moreShow less
openwall.com/lists/oss-security/2011/02/17/4
ubuntu.com/usn/USN-1067-1
lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html
hermes.opensuse.org/messages/7848248
debian.org/security/2011/dsa-2169
securityfocus.com/bid/46440
nvd.nist.gov/vuln/detail/CVE-2011-1000
github.com/advisories/GHSA-vjf4-chxp-cg8g
suse.com/security/cve/CVE-2011-1000