DEBIAN-CVE-2013-6483

DEBIAN-CVE-2013-6483 PUBLISHED CVSS 8.699999809265137 HIGH

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.

Risk Scores

CVSS v4.0

8.699999809265137

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:14	pidgin	0, 0, 0
Debian:13	pidgin	0, 0, 0
Debian:12	pidgin	0, 0, 0
Debian:11	pidgin	0, 0, 0

Timeline

Feb 6, 2014 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2013-6483 advisory

Open in Interactive Console →