PatchTheCVEgaim-encryption vulnerabilities and fixes
Recent CVEs affecting gaim-encryption, with upgrade or downgrade steps. 2 tracked.
Also searched as: gaim encryption.
gaim-encryption has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-31. Highest priority: CVE-2005-4693 (score 41/100).
- CVE-2005-4693 MEDIUM 5.0 DOWNGRADE Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a craf
- CVE-2003-0163 MEDIUM 5.0 DOWNGRADE decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length p
FAQ
How do I fix gaim-encryption vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gaim-encryption being exploited right now?
None of the tracked gaim-encryption CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gaim-encryption CVE should I patch first?
CVE-2005-4693 currently ranks highest (41/100): Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a craf.