libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML (CVE-2017-2640)

  - Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive     information via a dbus session monitor. (CVE-2012-1257)

  - The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin     before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509     certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain     sensitive information via a crafted certificate. (CVE-2014-3694)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities (CVE-2016-2368)

  - pidgin: Eavesdropping hashed password when logging (CVE-2016-2379)

  - libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote     Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary     code via a crafted message. (CVE-2014-3775)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pidgin: Out-of-bounds write in purple_markup_unescape_entity triggered by invalid XML (CVE-2017-2640)

  - cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process     memory, which might allow local users to obtain sensitive information by reading a core file or other     representation of memory contents. (CVE-2011-4922)

  - Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive     information via a dbus session monitor. (CVE-2012-1257)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201508-02 (libgadu: Multiple vulnerabilities)

    libgadu contains multiple vulnerabilities:
      X.509 certificates are not properly validated (CVE-2013-4488)       A integer overflow error could lead to a buffer overflow         (CVE-2013-6487)       Malformed responses from a Gadu-Gadu file relay server are not         properly handled (CVE-2014-3775)   Impact :

    A remote attacker may be able to execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, or spoof       servers.
  Workaround :

    There is no known workaround at this time.

- Update to version 1.11.4, bugfix release :

  + Fix buffer overflow with remote code execution     potential. Only triggerable by a Gadu-Gadu server or a     man-in-the-middle. CVE-2013-6487 (bnc#861019,     bnc#878540)

  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)

  + Minor fixes reported by Pidgin project members.

Updated libgadu packages fix security vulnerability :

It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2014-3775).

- Security bug fix: remote Gadu-Gadu file relay servers     could cause a denial of service (memory overwrite) or     possibly execute arbitrary code via a crafted message     (CVE-2014-3775).

    - Fixes related to image transfers.

    - Regression test reliability fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2216-1 advisory.

    It was discovered that Pidgin incorrectly handled certain messages from Gadu-Gadu file relay servers. A     malicious remote server or a machine-in-the-middle could use this issue to cause Pidgin to crash,     resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that malformed responses from a Gadu-Gadu file relay server could lead to denial of service or the execution of arbitrary code in applications linked to the libgadu library.

The oldstable distribution (squeeze) is not affected.

ID	Name	Product	Family	Severity
199367	RHEL 6 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199333	RHEL 7 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199298	RHEL 5 : pidgin (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
85430	GLSA-201508-02 : libgadu: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
75378	openSUSE Security Update : libgadu (openSUSE-SU-2014:0722-1)	Nessus	SuSE Local Security Checks	high
74454	Mandriva Linux Security Advisory : libgadu (MDVSA-2014:121)	Nessus	Mandriva Local Security Checks	high
74386	Fedora 19 : libgadu-1.12.0-0.5.rc3.fc19 (2014-6645)	Nessus	Fedora Local Security Checks	high
74257	Fedora 20 : libgadu-1.12.0-0.5.rc3.fc20 (2014-6687)	Nessus	Fedora Local Security Checks	high
74135	Ubuntu 14.04 LTS : Pidgin vulnerability (USN-2216-1)	Nessus	Ubuntu Local Security Checks	critical
74134	Ubuntu 12.04 LTS / 13.10 : libgadu vulnerability (USN-2215-1)	Nessus	Ubuntu Local Security Checks	high
74129	Debian DSA-2935-1 : libgadu - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-3775

critical

Tenable Plugins

critical

high

critical

high

high

high

high

high

critical

high

high