CVE-2013-1769

Publication date 28 February 2013

Last updated 24 July 2024

A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted message.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
telepathy-gabble	13.04 raring	Not affected
	12.10 quantal	Fixed 0.16.1-2ubuntu0.1
	12.04 LTS precise	Fixed 0.16.0-0ubuntu3.1
	11.10 oneiric	Ignored
	10.04 LTS lucid	Ignored
	8.04 LTS hardy	Ignored

Notes

jdstrand

remotely trigged DoS in client software, arguably of 'low' priority

mdeslaur

upstream bug 57521 contains another crasher fix.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
telepathy-gabble	Upstream: ?id=0d9 Upstream: ?id=3b1 Upstream: ?id=099 Upstream: ?id=3e1 Upstream: ?id=565

References

Related Ubuntu Security Notices (USN)