Lookup for vulnerable packages by Package URL.
| Purl | pkg:rpm/redhat/pidgin@1.5.1-6?arch=el3 |
| Type | rpm |
| Namespace | redhat |
| Name | pidgin |
| Version | 1.5.1-6 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-6178-958q-dugb |
| vulnerability_id |
VCID-6178-958q-dugb |
| summary |
The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3615 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.08411 |
| scoring_system |
epss |
| scoring_elements |
0.92512 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.08411 |
| scoring_system |
epss |
| scoring_elements |
0.92538 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.08411 |
| scoring_system |
epss |
| scoring_elements |
0.9254 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.08411 |
| scoring_system |
epss |
| scoring_elements |
0.92541 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3615 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3615
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6178-958q-dugb |
|
| 1 |
| url |
VCID-r98g-ggwd-j7fk |
| vulnerability_id |
VCID-r98g-ggwd-j7fk |
| summary |
The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3083 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01284 |
| scoring_system |
epss |
| scoring_elements |
0.80025 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01284 |
| scoring_system |
epss |
| scoring_elements |
0.80088 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01284 |
| scoring_system |
epss |
| scoring_elements |
0.80104 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01284 |
| scoring_system |
epss |
| scoring_elements |
0.80096 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3083 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3083
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-r98g-ggwd-j7fk |
|
| 2 |
| url |
VCID-z5vt-kryc-2fer |
| vulnerability_id |
VCID-z5vt-kryc-2fer |
| summary |
libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-2703 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00643 |
| scoring_system |
epss |
| scoring_elements |
0.71127 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00643 |
| scoring_system |
epss |
| scoring_elements |
0.71217 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00643 |
| scoring_system |
epss |
| scoring_elements |
0.7123 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00643 |
| scoring_system |
epss |
| scoring_elements |
0.71228 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-2703 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-2703
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z5vt-kryc-2fer |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 0.1 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pidgin@1.5.1-6%3Farch=el3 |