CVE-2013-1431: The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabb

Q: How do I fix CVE-2013-1431?

telepathy gabble: upgrade to newer than 0.16.5. Exact commands for each OS are on this page.

Q: Is CVE-2013-1431 being exploited?

CVE-2013-1431 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2013-1431 affect?

CVE-2013-1431 affects telepathy gabble. Severity is medium (CVSS 6.8). The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verificati

Q: How urgent is CVE-2013-1431?

Priority 49/100. On your watchlist

This month

MEDIUM 6.8WATCHLISTUPGRADE

CVE-2013-1431 is a medium-severity flaw (CVSS 6.8) affecting telepathy gabble. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks.

Why this priority

On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score	6.8 (Medium)
EPSS exploit chance	2.0% (top 19%)
CISA exploited list	No
Weakness	CWE-20
Published	2013-09-23
Last modified	2026-06-16

Publisher (CNA): Debian GNU/Linux · Vendor: simon mcvittie

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2013-09-23 20:55 UTCPublished CVE record published
2026-06-16 23:51 UTCUpdated Record last modified

simon mcvittie telepathy gabble UPGRADE

Affected: <= 0.16.5 · 0.16.0 · 0.16.1 · 0.16.2 · 0.16.3 · 0.16.4 · 0.17.0 · 0.17.1

Fixed in: newer than 0.16.5

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy telepathy-gabble || rpm -q telepathy-gabble || telepathy-gabble --version

2. UPGRADE to newer than 0.16.5 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade telepathy-gabble

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade telepathy-gabble

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2013-1431?

telepathy gabble: upgrade to newer than 0.16.5. Exact commands for each OS are on this page.

Is CVE-2013-1431 being exploited?

CVE-2013-1431 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2013-1431 affect?

CVE-2013-1431 affects telepathy gabble. Severity is medium (CVSS 6.8). The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verificati

How urgent is CVE-2013-1431?

Priority 49/100. On your watchlist

Related CVEs

CVE-2013-1769 MEDIUM 5.0 DOWNGRADE A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote at

References

← Back to latest CVEs