CVE-2016-10189

Опубликовано: 14 мар. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.

Ссылки

http://www.debian.org/security/2017/dsa-3853
http://www.openwall.com/lists/oss-security/2017/01/30/4
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/31/11
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/95931
https://bugs.bitlbee.org/ticket/1282
Issue Tracking
Patch
Vendor Advisory
https://github.com/bitlbee/bitlbee/commit/701ab8129ba9ea64f569daedca9a8603abad740f
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3853
http://www.openwall.com/lists/oss-security/2017/01/30/4
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/01/31/11
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/95931
https://bugs.bitlbee.org/ticket/1282
Issue Tracking
Patch
Vendor Advisory
https://github.com/bitlbee/bitlbee/commit/701ab8129ba9ea64f569daedca9a8603abad740f
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*

Версия до 3.4.2 (включая)

cpe:2.3:a:bitlbee:bitlbee-libpurple:*:*:*:*:*:*:*:*

Версия до 3.5 (включая)

EPSS

Процентиль: 90%

0.04041

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2016-10189

CVSS3: 7.5

ubuntu

больше 9 лет назад

CVE-2016-10189

CVSS3: 7.5

debian

больше 9 лет назад

BitlBee before 3.5 allows remote attackers to cause a denial of servic ...

openSUSE-SU-2017:0669-1

suse-cvrf

больше 9 лет назад

Security update for bitlbee

GHSA-f3fv-7pqw-59cx

CVSS3: 7.5

github

больше 4 лет назад

EPSS

Процентиль: 90%

0.04041

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476