CVE-2017-5668

概要

参考情報

• openwall.com/lists/oss-security/2017/01/30/4 · Mailing List
• openwall.com/lists/oss-security/2017/01/31/11 · Mailing List
• securityfocus.com/bid/95932
• bugs.bitlbee.org/ticket/1282 · Issue Tracking
• bitlbee/bitlbee commit 30d598c · Patch

bitlbee のその他の脆弱性

• CVE-2012-1187緊急 9.8Bitlbee does not drop extra group privileges correctly in unix.c
• CVE-2016-10189高 7.5BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary …
• CVE-2016-10188緊急 9.8Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute …
• CVE-2008-3969中 5.0Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknow…
• CVE-2008-3920高 7.5Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vecto…