PatchTheCVEpidgin-otr vulnerabilities and fixes
Recent CVEs affecting pidgin-otr, with upgrade or downgrade steps. 2 tracked.
Also searched as: pidgin otr.
pidgin-otr has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2016-04-12. Highest priority: CVE-2015-8833 (score 63/100).
- CVE-2015-8833 CRITICAL 9.8 UPGRADE Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging
- CVE-2012-2369 HIGH 7.5 UPGRADE Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OT
FAQ
How do I fix pidgin-otr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pidgin-otr being exploited right now?
None of the tracked pidgin-otr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pidgin-otr CVE should I patch first?
CVE-2015-8833 currently ranks highest (63/100): Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging.