Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25544

Pidgin 2.13.0 Denial of Service via Malformed Username

Description

Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pidgin Pidgin

  • 2.13.0affected

References