CVE-2014-0020

Publication date 5 February 2014

Last updated 24 July 2024

Ubuntu priority

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
pidgin	13.10 saucy	Fixed 1:2.10.7-0ubuntu4.1.13.10.1
	12.10 quantal	Fixed 1:2.10.6-0ubuntu2.3
	12.04 LTS precise	Fixed 1:2.10.3-0ubuntu1.4
	10.04 LTS lucid	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
pidgin	Upstream: http://hg.pidgin.im/pidgin/main/rev/a167504359e5 Upstream: http://hg.pidgin.im/pidgin/main/rev/9f132a6855cd Upstream: http://hg.pidgin.im/pidgin/main/rev/5845d9fa7084 Upstream: http://hg.pidgin.im/pidgin/main/rev/6b0e0566af20 Upstream: http://hg.pidgin.im/pidgin/main/rev/4d9be297d399 Upstream: http://hg.pidgin.im/pidgin/main/rev/7d0fb0c6d8d4

References

Related Ubuntu Security Notices (USN)

USN-2100-1
Pidgin vulnerabilities
6 February 2014

CVE-2014-0020

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references