CVE-2019-25544: Pidgin 2.13.0 Denial of Service via Malformed Username
Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25544?
CVE-2019-25544 has been classified as a denial of service vulnerability.
How do I fix CVE-2019-25544?
To fix CVE-2019-25544, users should avoid using the vulnerable Pidgin version 2.13.0 and upgrade to a patched version.
Who is affected by CVE-2019-25544?
CVE-2019-25544 affects users of Pidgin version 2.13.0 who attempt to create accounts with excessively long usernames.
Can CVE-2019-25544 be exploited remotely?
CVE-2019-25544 requires local access to exploit, as the vulnerability is triggered during account creation.
What versions of Pidgin are vulnerable to CVE-2019-25544?
Only Pidgin version 2.13.0 is identified as vulnerable to CVE-2019-25544.