CVE-2016-1000030

NONE EPSS 76.4%
Published Sep 5, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Sep 5, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can result in code execution. This attack appear to be exploitable via custom X.509 certificate from another client. This vulnerability appears to have been fixed in 2.11.0.

Threat Intelligence

EPSS Exploit Probability
76.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-295

Affected Products 2

VendorProductVersionRange
suselinux_enterprise_server11any
pidginpidgin* <2.11.0

References 5

  • access.redhat.com https://access.redhat.com/security/cve/cve-2016-1000030
    Third Party Advisory
  • bitbucket.org https://bitbucket.org/pidgin/main/commits/d6fc1ce76ffe
    PatchThird Party Advisory
  • pidgin.im https://pidgin.im/news/security/?id=91
    Vendor Advisory
  • security.gentoo.org https://security.gentoo.org/glsa/201701-38
    Third Party Advisory
  • suse.com https://www.suse.com/pt-br/security/cve/CVE-2016-1000030/
    Third Party Advisory

Remediation

  • bitbucket.org https://bitbucket.org/pidgin/main/commits/d6fc1ce76ffe
    PatchThird Party Advisory