UBUNTU-CVE-2016-10189: Null Pointer Dereference
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can trigger the issue without authentication or user interaction by sending a file transfer request involving a contact that is not in the contact list.
Are default BitlBee installations affected?
The available data identifies BitlBee versions before 3.5 as affected. It does not state whether a particular Ubuntu package configuration or default setup is required beyond handling file transfer requests.
What is the impact if exploitation succeeds?
The documented impact is a NULL pointer dereference that can crash BitlBee, causing denial of service. The issue may also allow arbitrary code execution.
How can I determine whether my system is exposed?
Check whether the installed BitlBee version is earlier than 3.5 and whether it accepts file transfer requests. Systems meeting those conditions may be vulnerable when a request references a contact absent from the contact list.