CVE-2016-2374
Publication date 23 June 2016
Last updated 25 August 2025
Ubuntu priority
Description
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT MultiMX message sent via the server can result in an out-of-bounds write leading to memory disclosure and code execution.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| pidgin | 16.04 LTS xenial |
Fixed 1:2.10.12-0ubuntu5.1
|
| 14.04 LTS trusty |
Fixed 1:2.10.9-0ubuntu3.3
|
|
Patch details
| Package | Patch details |
|---|---|
| pidgin |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
8.1 · High
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-3031-1
- Pidgin vulnerabilities
- 12 July 2016