Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item.

The remote host is affected by the vulnerability described in GLSA-201701-10 (libotr, Pidgin OTR: Remote execution of arbitrary code)

    Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please       review the CVE identifiers for more information.
  Impact :

    A remote attacker could send a specially crafted message, possibly       resulting in the execution of arbitrary code with the privileges of the       process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update for pidgin-otr fixes the following issues :

  - CVE-2015-8833: A heap based use-after-free issue was     fixed in pidgin-otr that could lead to crashes or     potential code execution.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update to pidgin-otr 4.0.2 fixes the following issue :

  - CVE-2015-8833: use-after-free issue during SMP     (boo#970498)

It also contains new and updated translations.

Stefan Sperling discovered that pidgin-otr, a Pidgin plugin implementing Off-The-Record messaging, contained a use-after-free bug.
This could be used by a malicious remote user to intentionally crash the application, thus causing a denial-of-service.

Hanno Bock reports :

The pidgin-otr plugin version 4.0.2 fixes a heap use after free error.
The bug is triggered when a user tries to authenticate a buddy and happens in the function create_smp_dialog.

ID	Name	Product	Family	Severity
96241	GLSA-201701-10 : libotr, Pidgin OTR: Remote execution of arbitrary code	Nessus	Gentoo Local Security Checks	critical
90304	SUSE SLED12 Security Update : pidgin-otr (SUSE-SU-2016:0912-1)	Nessus	SuSE Local Security Checks	critical
90172	openSUSE Security Update : pidgin-otr (openSUSE-2016-397)	Nessus	SuSE Local Security Checks	critical
90126	Debian DSA-3528-1 : pidgin-otr - security update	Nessus	Debian Local Security Checks	critical
89853	FreeBSD : pidgin-otr -- use after free (77e0b631-e6cf-11e5-85be-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2015-8833

critical

Tenable Plugins

critical

critical

critical

critical

critical