CVE-2016-2368: Buffer Overflow
Published Jan 6, 2017
·Updated
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.
Affected Software
5 affected components
Pidgin Pidgin<=2.10.12
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Jan 6, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-2368?
CVE-2016-2368 has a critical severity rating due to the potential for remote code execution and memory disclosure.
2
How do I fix CVE-2016-2368?
To address CVE-2016-2368, upgrade Pidgin to version 2.10.12 or later.
3
Which versions of Pidgin are affected by CVE-2016-2368?
CVE-2016-2368 affects all versions of Pidgin prior to 2.10.12.
4
What software is impacted by CVE-2016-2368?
CVE-2016-2368 impacts Pidgin on various operating systems including Ubuntu and Debian.
5
Can CVE-2016-2368 lead to data breaches?
Yes, CVE-2016-2368 could potentially lead to memory disclosure which may contribute to data breaches.