CVE-2016-2368: Buffer Overflow
First published: Fri Jan 06 2017(Updated: )
Multiple memory corruption vulnerabilities exist in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could result in multiple buffer overflows, potentially resulting in code execution or memory disclosure.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pidgin | <=2.10.12 | |
| Ubuntu | =12.04 | |
| Ubuntu | =14.04 | |
| Ubuntu | =15.10 | |
| Debian Linux | =8.0 | |
| <=2.10.12 | ||
| =12.04 | ||
| =14.04 | ||
| =15.10 | ||
| =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-2368?
CVE-2016-2368 has a critical severity rating due to the potential for remote code execution and memory disclosure.
How do I fix CVE-2016-2368?
To address CVE-2016-2368, upgrade Pidgin to version 2.10.12 or later.
Which versions of Pidgin are affected by CVE-2016-2368?
CVE-2016-2368 affects all versions of Pidgin prior to 2.10.12.
What software is impacted by CVE-2016-2368?
CVE-2016-2368 impacts Pidgin on various operating systems including Ubuntu and Debian.
Can CVE-2016-2368 lead to data breaches?
Yes, CVE-2016-2368 could potentially lead to memory disclosure which may contribute to data breaches.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/remedy
- agent/first-publish-date
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/pidgin
- canonical/pidgin
- version/pidgin/2.10.12
- vendor/canonical
- canonical/ubuntu
- version/ubuntu/12.04
- version/ubuntu/14.04
- version/ubuntu/15.10
- vendor/debian
- canonical/debian linux
- version/debian linux/8.0