CVE

Id
66426  
CVE No.
CVE-2013-6479  
Status
Candidate  
Description
util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a denial of service (application crash) via a crafted response.  
Phase
Assigned (20131104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
645464 66426 CVE-2013-6479 CONFIRM:http://hg.pidgin.im/pidgin/main/rev/cd529e1158d3  View
645465 66426 CVE-2013-6479 CONFIRM:http://pidgin.im/news/security/?id=73  View
645466 66426 CVE-2013-6479 DEBIAN:DSA-2859  View
645467 66426 CVE-2013-6479 URL:http://www.debian.org/security/2014/dsa-2859  View
645468 66426 CVE-2013-6479 REDHAT:RHSA-2014:0139  View
645469 66426 CVE-2013-6479 URL:https://rhn.redhat.com/errata/RHSA-2014-0139.html  View
645470 66426 CVE-2013-6479 SUSE:openSUSE-SU-2014:0239  View
645471 66426 CVE-2013-6479 URL:http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html  View
645472 66426 CVE-2013-6479 SUSE:openSUSE-SU-2014:0326  View
645473 66426 CVE-2013-6479 URL:http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html  View
645474 66426 CVE-2013-6479 UBUNTU:USN-2100-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24430 JVNDB-2013-006005 Pidgin の libpurple の STUN プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性 Pidgin の libpurple の STUN プロトコルの実装には、サービス運用妨害 (out-of-bounds write 操作およびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-6484 66426 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006005.html  View