VDB
CVE-2016-2371
CVE-2016-2371
PUBLISHED
CVSS 8.100000381469727 HIGH
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
EPSS 3.16% · 87.9th percentile
Risk Scores
CVSS 3.0
8.100000381469727
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
3.16%
87.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | pidgin | *, 0, 1:2.10.11-0ubuntu4 |
| Ubuntu:14.04:LTS | pidgin | 0, 1:2.10.7-0ubuntu4.1, 1:2.10.7-0ubuntu4.2 |
Timeline
- Jun 23, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
- Sep 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2016-2371 third-party-advisory
- http://www.talosintel.com/reports/TALOS-2016-0139/ third-party-advisory
- http://www.pidgin.im/news/security/?id=104 third-party-advisory
- https://ubuntu.com/security/notices/USN-3031-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2016-2371 third-party-advisory