CVE-2016-10189

概要

参考情報

• debian.org/security/2017/dsa-3853
• openwall.com/lists/oss-security/2017/01/30/4 · Mailing List
• openwall.com/lists/oss-security/2017/01/31/11 · Mailing List
• securityfocus.com/bid/95931
• bugs.bitlbee.org/ticket/1282 · Issue Tracking
• bitlbee/bitlbee commit 701ab81 · Patch

bitlbee のその他の脆弱性

• CVE-2012-1187緊急 9.8Bitlbee does not drop extra group privileges correctly in unix.c
• CVE-2017-5668緊急 9.8bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execut…
• CVE-2016-10188緊急 9.8Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute …
• CVE-2008-3969中 5.0Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknow…
• CVE-2008-3920高 7.5Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vecto…