CVE-2014-3696

EPSS 2.1%

Published: 10/29/2014Modified: 4/28/2026

Also known as:DEBIAN-CVE-2014-3696

Description

nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a crafted server message that triggers a large memory allocation.

Affected packages (1)

Debian/pidginfrom 0, < 2.10.10-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3696