Approved changes feed: RSS · Atom

cpe:2.3:a:bitlbee:bitlbee-libpurple:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitlbee (2c324ceb-a063-57c1-97af-14e43472080f)
ProductBitlbee Libpurple (70adbd21-f420-5883-ab4e-49a4692c93e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bitlbee purl2cpe 2026-06-01 10:17:44.709619
pkg:deb/ubuntu/bitlbee purl2cpe 2026-06-01 10:17:44.709622
pkg:docker/ezkrg/bitlbee-libpurple purl2cpe 2026-06-01 10:17:44.709624
pkg:github/ezkrg/docker-bitlbee-libpurple purl2cpe 2026-06-01 10:17:44.709627

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5668 vulnerable 2026-06-08 05:09:47.837037 Details available
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189.
Published: 2017-03-14T14:00:00.000Z
Updated: 2024-08-05T15:11:47.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10189 vulnerable 2026-06-08 05:07:17.545106 Details available
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.
Published: 2017-03-14T14:00:00.000Z
Updated: 2024-08-06T03:14:42.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.