Pidgin vulnerabilities

Products

• Pidgin 87
• Libpurple 7

Newest

• pidgin Pidgin 2.13.0 Denial of Service via Malformed Username CVE-2019-25544 Fix available 6.9 MediumMarch 21, 2026
• pidgin, debian linux +1 more An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses... CVE-2022-26491 Fix available 5.9 MediumMay 16, 2022
• pidgin Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain... CVE-2012-1257 Public exploit 5.5 MediumNovember 20, 2019
• pidgin, suse linux enterprise server +1 more Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to... CVE-2016-1000030 Fix available 9.8 CriticalSeptember 5, 2018
• pidgin mxit The Mxit protocol uses weak encryption when encrypting user passwords, which might allow... CVE-2016-2379 8.8 HighMarch 29, 2017
• pidgin, debian linux, redhat enterprise linux desktop +4 more +6 more An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A... CVE-2017-2640 Fix available 7.5 HighMarch 10, 2017
• pidgin, canonical ubuntu linux, debian linux +2 more A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted... CVE-2016-4323 Fix available 3.7 LowJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT... CVE-2016-2380 Fix available 3.1 LowJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially... CVE-2016-2378 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially... CVE-2016-2377 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially... CVE-2016-2376 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An exploitable out-of-bounds read exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2375 Fix available 5.3 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in... CVE-2016-2374 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2373 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT... CVE-2016-2372 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2371 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2370 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2369 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin.... CVE-2016-2368 Fix available 8.1 HighJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT... CVE-2016-2367 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2366 Fix available 5.9 MediumJune 23, 2016
• pidgin, canonical ubuntu linux, debian linux +2 more A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.... CVE-2016-2365 Fix available 5.9 MediumJune 23, 2016
• pidgin Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin... CVE-2014-3697 6.4 MediumOctober 29, 2014
• pidgin The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin... CVE-2014-3698 Fix available 5.0 MediumOctober 23, 2014
• pidgin nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows... CVE-2014-3696 Fix available 5.0 MediumOctober 23, 2014
• pidgin markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers... CVE-2014-3695 Fix available 5.0 MediumOctober 23, 2014
• pidgin, canonical ubuntu linux, debian linux +1 more +3 more The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in... CVE-2014-3694 Fix available 6.4 MediumOctober 23, 2014
• pidgin gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute... CVE-2013-6486 9.3 HighFebruary 6, 2014
• pidgin The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts,... CVE-2014-0020 Fix available 5.0 MediumFebruary 5, 2014
• pidgin The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an... CVE-2013-6490 Public exploitFix available EPSS 14.8% 10.0 HighFebruary 5, 2014
• pidgin Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote... CVE-2013-6489 Fix available 5.0 MediumFebruary 5, 2014
• pidgin Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to... CVE-2013-6485 Fix available 5.0 MediumFebruary 5, 2014
• pidgin The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers... CVE-2013-6484 Fix available 5.0 MediumFebruary 5, 2014
• pidgin The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether... CVE-2013-6483 Fix available 6.4 MediumFebruary 5, 2014
• pidgin Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer... CVE-2013-6482 Fix available 5.0 MediumFebruary 5, 2014
• pidgin libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a... CVE-2013-6481 Fix available 5.0 MediumFebruary 5, 2014
• pidgin util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses... CVE-2013-6479 Fix available 5.0 MediumFebruary 5, 2014
• pidgin gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support... CVE-2013-6478 Fix available 4.3 MediumFebruary 5, 2014
• pidgin Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to... CVE-2013-6477 Fix available 5.0 MediumFebruary 5, 2014
• pidgin The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8... CVE-2012-6152 Fix available 5.0 MediumFebruary 5, 2014
• pidgin Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin... CVE-2013-6487 Fix available 7.5 HighFebruary 3, 2014
• pidgin upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP... CVE-2013-0274 Fix available 2.9 LowFebruary 16, 2013
• pidgin sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly... CVE-2013-0273 Fix available 5.0 MediumFebruary 16, 2013
• pidgin Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows... CVE-2013-0272 Fix available 6.8 MediumFebruary 16, 2013
• pidgin The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to... CVE-2013-0271 Fix available 5.0 MediumFebruary 16, 2013
• pidgin cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in... CVE-2011-4922 Fix available 2.1 LowAugust 8, 2012
• pidgin Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5... CVE-2012-3374 Fix available 7.5 HighJuly 7, 2012
• pidgin msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle... CVE-2012-2318 Fix available 5.0 MediumJuly 3, 2012
• pidgin proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection... CVE-2012-2214 Fix available 3.5 LowJuly 3, 2012
• pidgin The msn_oim_report_to_user function in oim.c in the MSN protocol plugin in libpurple in Pidgin... CVE-2012-1178 Fix available 5.0 MediumMarch 15, 2012
• Show olderLoading…