Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creation. Attackers can input a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the application to become unavailable.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the     application by providing an excessively long username string during account creation. Attackers can input     a buffer of 1000 characters in the username field and trigger a crash when joining a chat, causing the     application to become unavailable. (CVE-2019-25544)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
326982	SUSE SLES12: farstream-data / farstream-devel / finch / finch-devel / etc (SUSE-SU-2026:2967-1)	Nessus	SuSE Local Security Checks	Local	medium
303376	Linux Distros Unpatched Vulnerability : CVE-2019-25544	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2019-25544

medium

Tenable Plugins

medium

medium