Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-25544

Опубликовано: 21 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.2

Описание

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needs-triage

jammy

needs-triage

Показывать по

EPSS

Процентиль: 8%
0.00187
Низкий

6.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.2
redhat
5 месяцев назад

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

CVSS3: 6.2
nvd
5 месяцев назад

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

CVSS3: 6.2
debian
5 месяцев назад

Pidgin 2.13.0 contains a denial of service vulnerability that allows l ...

suse-cvrf
около 2 месяцев назад

Security update for libgnt, meson, pidgin

CVSS3: 6.2
github
5 месяцев назад

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

EPSS

Процентиль: 8%
0.00187
Низкий

6.2 Medium

CVSS3