Search for packages
Package details: pkg:deb/debian/mcabber@0.10.0-1%2Bsqueeze1
purl pkg:deb/debian/mcabber@0.10.0-1%2Bsqueeze1
Next non-vulnerable version 1.0.4-1.1
Latest non-vulnerable version 1.0.4-1.1
Risk 3.4
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-d4ue-89zk-kfds
Aliases:
CVE-2017-5604
1.0.4-1.1
Affected by 0 other vulnerabilities.
VCID-fwwg-d98y-1kh6
Aliases:
CVE-2016-9928
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets.
1.0.4-1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbk-v93c-hyav A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM. CVE-2009-3560
VCID-decx-ng47-vfcr A buffer over-read flaw was found in the bundled expat library. An attacker who is able to get Apache to parse an untrused XML document (for example through mod_dav) may be able to cause a crash. This crash would only be a denial of service if using the worker MPM. CVE-2009-3720

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T19:33:27.370288+00:00 Debian Oval Importer Affected by VCID-d4ue-89zk-kfds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T15:30:16.170766+00:00 Debian Oval Importer Affected by VCID-fwwg-d98y-1kh6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:17:19.759744+00:00 Debian Oval Importer Fixing VCID-decx-ng47-vfcr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T11:52:48.818641+00:00 Debian Oval Importer Fixing VCID-cjbk-v93c-hyav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0