Security Advisory

CVE-2017-5668

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-14 14:00:00
Last updated 2024-08-05 15:11:47
Assigner mitre
State PUBLISHED

Description

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189.