libgadu before 1.11.4 and 1.12.0 before 1.12.0-rc3, as used in Pidgin and other products, allows remote Gadu-Gadu file relay servers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted message.

The remote host is affected by the vulnerability described in GLSA-201508-02 (libgadu: Multiple vulnerabilities)

    libgadu contains multiple vulnerabilities:
      X.509 certificates are not properly validated (CVE-2013-4488)       A integer overflow error could lead to a buffer overflow         (CVE-2013-6487)       Malformed responses from a Gadu-Gadu file relay server are not         properly handled (CVE-2014-3775)   Impact :

    A remote attacker may be able to execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, or spoof       servers.
  Workaround :

    There is no known workaround at this time.

- Update to version 1.11.4, bugfix release :

  + Fix buffer overflow with remote code execution     potential. Only triggerable by a Gadu-Gadu server or a     man-in-the-middle. CVE-2013-6487 (bnc#861019,     bnc#878540)

  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)

  + Minor fixes reported by Pidgin project members.

Updated libgadu packages fix security vulnerability :

It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2014-3775).

- Security bug fix: remote Gadu-Gadu file relay servers     could cause a denial of service (memory overwrite) or     possibly execute arbitrary code via a crafted message     (CVE-2014-3775).

    - Fixes related to image transfers.

    - Regression test reliability fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Pidgin incorrectly handled certain messages from Gadu-Gadu file relay servers. A malicious remote server or a man in the middle could use this issue to cause Pidgin to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libgadu incorrectly handled certain messages from file relay servers. A malicious remote server or a man in the middle could use this issue to cause applications using libgadu to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that malformed responses from a Gadu-Gadu file relay server could lead to denial of service or the execution of arbitrary code in applications linked to the libgadu library.

The oldstable distribution (squeeze) is not affected.

ID	Name	Product	Family	Severity
85430	GLSA-201508-02 : libgadu: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
75378	openSUSE Security Update : libgadu (openSUSE-SU-2014:0722-1)	Nessus	SuSE Local Security Checks	high
74454	Mandriva Linux Security Advisory : libgadu (MDVSA-2014:121)	Nessus	Mandriva Local Security Checks	high
74386	Fedora 19 : libgadu-1.12.0-0.5.rc3.fc19 (2014-6645)	Nessus	Fedora Local Security Checks	high
74257	Fedora 20 : libgadu-1.12.0-0.5.rc3.fc20 (2014-6687)	Nessus	Fedora Local Security Checks	high
74135	Ubuntu 14.04 LTS : Pidgin vulnerability (USN-2216-1)	Nessus	Ubuntu Local Security Checks	critical
74134	Ubuntu 12.04 LTS / 13.10 : libgadu vulnerability (USN-2215-1)	Nessus	Ubuntu Local Security Checks	high
74129	Debian DSA-2935-1 : libgadu - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-3775

critical

Tenable Plugins

high

high

high

high

high

critical

high

high