VDB

GCVE-110-MAGEIA-2016-46

GCVE-110-MAGEIA-2016-46
Advisory Published
Vulnetix · Advisory published February 5, 2016
Gajim before 0.16.5 doesn't verify the origin of roster pushes thus allowing third parties to modify the roster via a man-in-the-middle attack (CVE-2015-8688).

Affected Products

VendorProductVersionsPlatforms
Mageiapython-nbxmpp0 (affected), 0.5.3-1.mga5 (unaffected)—
Mageiagajim0 (affected), 0.16.5-1.mga5 (unaffected)—

Browse GCVE Records

20,197 records in the GCVE database · Updated October 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›