CVE-2019-16237: High severity Dino Dino vulnerability
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313messagearchivemanagement.vala.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-16237?
CVE-2019-16237 is a vulnerability in Dino IM before 2019-09-10 that allows an attacker to bypass source verification of an MAM message.
How does CVE-2019-16237 affect Dino IM?
CVE-2019-16237 affects Dino IM versions up to exclusive 0.0. in Ubuntu and Debian, and up to 0.1.0 in Dino directly.
What is the severity of CVE-2019-16237?
CVE-2019-16237 has a severity rating of high, with a CVSS score of 7.5.
How can I fix CVE-2019-16237?
To fix CVE-2019-16237, update Dino IM to version 0.0. or higher in Ubuntu and Debian, and version 0.1.0 or higher in Dino directly.
Where can I find more information about CVE-2019-16237?
You can find more information about CVE-2019-16237 at the following references: [1](http://www.openwall.com/lists/oss-security/2019/09/12/5), [2](https://github.com/dino/dino/commit/307f16cc86dd2b95aa02ab8a85110e4a2d5e7363), [3](https://gultsch.de/dino_multiple.html).