Upstream information
Description
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 5.8 |
Vector | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Access Vector | Network |
Access Complexity | Medium |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | Partial |
Availability Impact | None |
SUSE Security Advisories:
- openSUSE-SU-2016:0102-1
openSUSE-SU-2016:3218-1
openSUSE-SU-2017:0259-1
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA gajim-0.16.6-1.1 openSUSE Tumbleweed GA mcabber-1.0.4-1.1 openSUSE Tumbleweed GA python36-sleekxmpp-1.3.3-4.18 |
SUSE Timeline for this CVE
CVE page created: Mon Jan 4 17:15:28 2016CVE page last modified: Thu Dec 7 13:10:02 2023