Back to CVE Browser

CVE-2016-1000030

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1800%

EPSS Percentile39.79th

PublishedSep 5, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client. This vulnerability appears to have been fixed in 2.11.0.

Affected Platforms (CPE)

💻

Suse

Linux Enterprise Server

= 11

📦

Pidgin

Pidgin

< 2.11.0

References & Advisories

🔗 https://access.redhat.com/security/cve/cve-2016-1000030

🔗 https://bitbucket.org/pidgin/main/commits/d6fc1ce76ffe

🔗 https://pidgin.im/news/security/?id=91

🔗 https://security.gentoo.org/glsa/201701-38

🔗 https://www.suse.com/pt-br/security/cve/CVE-2016-1000030/

🔗 https://access.redhat.com/security/cve/cve-2016-1000030

🔗 https://bitbucket.org/pidgin/main/commits/d6fc1ce76ffe

🔗 https://pidgin.im/news/security/?id=91

Related Vulnerabilities

CVE-2014-059810.0

Directory traversal vulnerability in iPrint in Novell Open Enterprise Server (OES) 11 SP1 before Maintenance Update 9151 on Linux ...

CVE-2011-216210.0

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2...

CVE-2006-073610.0

Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Serv...

CVE-2014-060910.0

Unspecified vulnerability in Novell Open Enterprise Server (OES) 11 SP1 before Scheduled Maintenance Update 9415 and 11 SP2 before...