A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted message.

telepathy-gabble was updated to fix a remote denial of service attack using NULL ptr dereferences during hashing. (CVE-2013-1769).

Maksim Otstavnov discovered that telepathy-gabble incorrectly handled TLS when connecting to legacy jabber servers. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. (CVE-2013-1431)

It was discovered that telepathy-gabble incorrectly handled certain messages. A remote attacker could use this flaw to cause applications using telepathy-gabble to crash, resulting in a denial of service.
This issue only affected Ubuntu 12.04 LTS and Ubuntu 12.10.
(CVE-2013-1769).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

telepathy-gabble was updated to fix several remotely-triggerable NULL crashes. (CVE-2013-1769)

Update to 0.16.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest security release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
74937	openSUSE Security Update : telepathy-gabble (openSUSE-SU-2013:0518-1)	Nessus	SuSE Local Security Checks	medium
66886	Ubuntu 12.04 LTS / 12.10 / 13.04 : telepathy-gabble vulnerabilities (USN-1873-1)	Nessus	Ubuntu Local Security Checks	medium
66021	SuSE 11.2 Security Update : telepathy-gabble (SAT Patch Number 7506)	Nessus	SuSE Local Security Checks	medium
65620	Fedora 18 : telepathy-gabble-0.16.5-1.fc18 (2013-3379)	Nessus	Fedora Local Security Checks	medium
65534	Fedora 17 : telepathy-gabble-0.16.5-1.fc17 (2013-3439)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-1769

high

Tenable Plugins

medium

medium

medium

medium

medium