CVE-2016-2371: High severity pidgin vulnerability
Published Jan 6, 2017
·Updated
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
Affected Software
5 affected components
Pidgin Pidgin<=2.10.12
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Jan 6, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-2371?
CVE-2016-2371 has a high severity rating due to the potential for code execution resulting from memory corruption.
2
How do I fix CVE-2016-2371?
To fix CVE-2016-2371, update Pidgin to version 2.10.13 or later.
3
What software is affected by CVE-2016-2371?
CVE-2016-2371 affects Pidgin versions up to and including 2.10.12 and specific Ubuntu and Debian Linux distributions.
4
Can CVE-2016-2371 be exploited remotely?
Yes, CVE-2016-2371 can be exploited remotely via specially crafted MXIT data sent from the server.
5
What are the potential consequences of CVE-2016-2371?
Exploitation of CVE-2016-2371 may lead to unauthorized code execution and potentially compromise the affected system.