← Zuruck zu CVEs

CVE-2013-6479

N/A

Beschreibung

util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht2/6/2014

Zuletzt geandert4/29/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

pidgin:pidgin

Schwachen (CWE)

CWE-399

Referenzen

http://hg.pidgin.im/pidgin/main/rev/cd529e1158d3(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html(secalert@redhat.com)

http://pidgin.im/news/security/?id=73(secalert@redhat.com)

http://www.debian.org/security/2014/dsa-2859(secalert@redhat.com)

http://www.ubuntu.com/usn/USN-2100-1(secalert@redhat.com)

https://rhn.redhat.com/errata/RHSA-2014-0139.html(secalert@redhat.com)

http://hg.pidgin.im/pidgin/main/rev/cd529e1158d3(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html(af854a3a-2127-422b-91ae-364da2661108)

http://pidgin.im/news/security/?id=73(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2014/dsa-2859(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2100-1(af854a3a-2127-422b-91ae-364da2661108)

https://rhn.redhat.com/errata/RHSA-2014-0139.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.