CVE-2017-5668
14.03.2017, 14:59
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189.Enginsight
| Vendor | Product | Version |
|---|---|---|
| bitlbee | bitlbee | 𝑥 ≤ 3.4.2 |
| bitlbee | bitlbee-libpurple | 𝑥 ≤ 3.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bitlbee |
|
Common Weakness Enumeration
References