CVE-2013-6490
NoneCVSS
—
EPSS
14.8%
Published
Feb 6, 2014
CISA due date
—
The record
The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | pidgin | 0 | 2.10.8-1 |
| Debian:12 | pidgin | 0 | 2.10.8-1 |
| Debian:13 | pidgin | 0 | 2.10.8-1 |
| Debian:6.0 | pidgin | 0 | 2.7.3-1+squeeze4 |
| Debian:7 | pidgin | 0 | 2.10.9-1~deb7u1 |
| Mageia:3 | pidgin | 0 | 2.10.9-1.mga3 |
| Red Hat:enterprise_linux:5::client | finch | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | finch-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | libpurple | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | libpurple-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | libpurple-perl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | libpurple-tcl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | pidgin | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | pidgin-debuginfo | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | pidgin-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client | pidgin-perl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | finch | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | finch-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | libpurple | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | libpurple-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | libpurple-perl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | libpurple-tcl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | pidgin | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | pidgin-debuginfo | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | pidgin-devel | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:5::client_workstation | pidgin-perl | 0 | 0:2.6.6-32.el5 |
| Red Hat:enterprise_linux:6::client | finch | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | finch-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | libpurple | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | libpurple-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | libpurple-perl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | libpurple-tcl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | pidgin | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | pidgin-debuginfo | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | pidgin-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | pidgin-docs | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::client | pidgin-perl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | finch | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | finch-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | libpurple | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | libpurple-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | libpurple-perl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | libpurple-tcl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | pidgin | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | pidgin-debuginfo | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | pidgin-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | pidgin-docs | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::server | pidgin-perl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | finch | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | finch-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | libpurple | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | libpurple-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | libpurple-perl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | libpurple-tcl | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | pidgin | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | pidgin-debuginfo | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | pidgin-devel | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | pidgin-docs | 0 | 0:2.7.9-27.el6 |
| Red Hat:enterprise_linux:6::workstation | pidgin-perl | 0 | 0:2.7.9-27.el6 |
Related vulnerabilities
- CVE-2022-26491 An issue was discovered in Pidgin before 2.14.9. Also affects pidgin
- CVE-2016-2365 A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Also affects pidgin
- CVE-2014-3694 The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in… Also affects pidgin
- CVE-2010-0013 Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in… Also affects pidgin
- CVE-2009-2694 The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple… Also affects pidgin
- CVE-2009-1376 Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol… Also affects pidgin
- CVE-2014-3775 libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products… Also affects pidgin
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119