PatchTheCVEkadu vulnerabilities
Recent CVEs affecting kadu products. 4 tracked.
kadu has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2012-02-29. Highest priority: CVE-2005-1852 (score 54/100).
- CVE-2012-1410 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation in Kadu 0.9.0 through
- CVE-2006-0768 MEDIUM 5.0 DOWNGRADE Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of imag
- CVE-2005-3960 HIGH 7.8 DOWNGRADE Kadu 0.4.2 and 0.5.0pre allows remote attackers to cause a denial of service (crash or generated traffic) via
- CVE-2005-1852 HIGH 7.5 DOWNGRADE MITIGATE Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, C
FAQ
How do I fix kadu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kadu being exploited right now?
None of the tracked kadu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kadu CVE should I patch first?
CVE-2005-1852 currently ranks highest (54/100): Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, C.