CVE-2016-2376
published 2017-01-06CVE-2016-2376: A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially…
PriorityP349high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
3.73%
88.6th percentile
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | pidgin | < pidgin 2.11.0-1 (bookworm) | pidgin 2.11.0-1 (bookworm) |
| pidgin | pidgin | <= 2.10.12 | — |
| pidgin | pidgin | — | — |
| pidgin | pidgin | >= 0 < 2.11.0-1 | 2.11.0-1 |
| pidgin | pidgin | >= 0 < 2.11.0-1 | 2.11.0-1 |
| pidgin | pidgin | >= 0 < 2.11.0-1 | 2.11.0-1 |
| pidgin | pidgin | >= 0 < 2.11.0-1 | 2.11.0-1 |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.1HIGH
vendor_debian8.1HIGH
vendor_redhat8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Pidgin vulnerabilities
vendor_ubuntu·2016-07-12
CVE-2016-2365 Pidgin vulnerabilities
Title: Pidgin vulnerabilities
Summary: Pidgin could be made to crash or run programs if it received
specially crafted network traffic.
Yves Younan discovered that Pidgin contained multiple issues in the MXit
protocol support. A remote attacker could use this issue to cause Pidgin to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Instructions: After a standard system update you need to restart Pidgin to make all the
necessary changes.
Red Hat
pidgin: MXIT read stage 0x3 Code Execution Vulnerability
vendor_redhat·2016-06-21·CVSS 8.1
CVE-2016-2376 [HIGH] CWE-122 pidgin: MXIT read stage 0x3 Code Execution Vulnerability
pidgin: MXIT read stage 0x3 Code Execution Vulnerability
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
Package: pidgin (Red Hat Enterprise Linux 5) - Will not fix
Package: pidgin (Red Hat Enterprise Linux 6) - Will not fix
Package: pidgin (Red Hat Enterprise Linux 7) - Will not fix
Debian
CVE-2016-2376: pidgin - A buffer overflow vulnerability exists in the handling of the MXIT protocol in P...
vendor_debian·2016·CVSS 8.1
CVE-2016-2376 [HIGH] CVE-2016-2376: pidgin - A buffer overflow vulnerability exists in the handling of the MXIT protocol in P...
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
Scope: local
bookworm: resolved (fixed in 2.11.0-1)
bullseye: resolved (fixed in 2.11.0-1)
forky: resolved (fixed in 2.11.0-1)
sid: resolved (fixed in 2.11.0-1)
trixie: resolved (fixed in 2.11.0-1)
GHSA
GHSA-cm5h-pv24-5q45: A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
ghsa_unreviewed·2022-05-17
CVE-2016-2376 [HIGH] CWE-119 GHSA-cm5h-pv24-5q45: A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
OSV
CVE-2016-2376: A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
osv·2017-01-06·CVSS 8.1
CVE-2016-2376 [HIGH] CVE-2016-2376: A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Pidgin Vulnerabilities
blogs_talos·2016-06-21·CVSS 5.9
[MEDIUM] Vulnerability Spotlight: Pidgin Vulnerabilities
## Vulnerability Spotlight: Pidgin Vulnerabilities
These vulnerabilities were discovered by Yves Younan .
Pidgin is a universal chat client that is used on millions of systems worldwide. The Pidgin chat client enables you to communicate on multiple chat networks simultaneously. Talos has identified multiple vulnerabilities in the way Pidgin handles the MXit protocol. These vulnerabilities fall into the following four categories.
Information Leakage
Denial Of Service
Directory Traversal
Buffer Overflow
The following vulnerabilities were identified (listed numerically by CVE):
CVE-2016-2365 - Pidgin MXIT Markup Command Denial of Service Vulnerability
CVE-2016-2366 - Pidgin MXIT Table Command Denial of Service Vulnerability
CVE-2016-2367 - Pidgin MXIT Avatar Length Memory Disclosure
Talos
Vulnerability Spotlight: Pidgin Vulnerabilities
blogs_talos·2016-06-21·CVSS 5.9
[MEDIUM] Vulnerability Spotlight: Pidgin Vulnerabilities
These vulnerabilities were discovered by Yves Younan.
Pidgin is a universal chat client that is used on millions of systems worldwide. The Pidgin chat client enables you to communicate on multiple chat networks simultaneously. Talos has identified multiple vulnerabilities in the way Pidgin handles the MXit protocol. These vulnerabilities fall into the following four categories.
- Information Leakage
- Denial Of Service
- Directory Traversal
- Buffer Overflow
The following vulnerabilities were identified (listed numerically by CVE):
CVE-2016-2365 - Pidgin MXIT Markup Command Denial of Service Vulnerability
CVE-2016-2366 - Pidgin MXIT Table Command Denial of Service Vulnerability
CVE-2016-2367 - Pidgin MXIT Avatar Length Memory Disclosure Vulnerability
CVE-2016-2368 - Pidgin MXIT g_sn
Bugzilla
CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability
bugzilla·2016-06-22·CVSS 8.1
CVE-2016-2376 [HIGH] CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability
CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability
A buffer overflows vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in arbitrary code execution. A malicious server or an attacker who intercepts the network traffic can send an invalid size for a packet which will trigger a buffer overflow.
External references:
http://www.talosintel.com/reports/TALOS-2016-0118/
http://www.pidgin.im/news/security/?id=92
Upstream fix:
https://bitbucket.org/pidgin/main/commits/19f89eda8587
http://www.debian.org/security/2016/dsa-3620http://www.pidgin.im/news/security/?id=92http://www.securityfocus.com/bid/91335http://www.talosintelligence.com/reports/TALOS-2016-0118/http://www.ubuntu.com/usn/USN-3031-1https://security.gentoo.org/glsa/201701-38http://www.debian.org/security/2016/dsa-3620http://www.pidgin.im/news/security/?id=92http://www.securityfocus.com/bid/91335http://www.talosintelligence.com/reports/TALOS-2016-0118/http://www.ubuntu.com/usn/USN-3031-1https://security.gentoo.org/glsa/201701-38
2017-01-06
Published