GCVE - cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bitlbee:bitlbee:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Bitlbee (`2c324ceb-a063-57c1-97af-14e43472080f`)
Product	Bitlbee (`bb5e15b5-9983-5e19-b8df-00905caa86c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/bitlbee`	purl2cpe	2026-06-01 10:17:44.712556
`pkg:deb/ubuntu/bitlbee`	purl2cpe	2026-06-01 10:17:44.712558
`pkg:github/bitlbee/bitlbee`	purl2cpe	2026-06-01 10:17:44.712560
`pkg:rpm/fedora/bitlbee`	purl2cpe	2026-06-01 10:17:44.712561
`pkg:rpm/opensuse/bitlbee`	purl2cpe	2026-06-01 10:17:44.712563

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-5668`	vulnerable	2026-06-08 05:09:47.836427	Details available bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-10189. Published: 2017-03-14T14:00:00.000Z Updated: 2024-08-05T15:11:47.379Z Open on db.gcve.eu Reference links https://bugs.bitlbee.org/ticket/1282 https://github.com/bitlbee/bitlbee/commit/30d598ce7cd3f136ee9d7097f39fa9818a272441 http://www.securityfocus.com/bid/95932 http://www.openwall.com/lists/oss-security/2017/01/31/11 http://www.openwall.com/lists/oss-security/2017/01/30/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10189`	vulnerable	2026-06-08 05:07:17.544163	Details available BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. Published: 2017-03-14T14:00:00.000Z Updated: 2024-08-06T03:14:42.351Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95931 https://bugs.bitlbee.org/ticket/1282 http://www.debian.org/security/2017/dsa-3853 https://github.com/bitlbee/bitlbee/commit/701ab8129ba9ea64f569daedca9a8603abad740f http://www.openwall.com/lists/oss-security/2017/01/31/11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10188`	vulnerable	2026-06-08 05:07:17.543646	Details available Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire. Published: 2017-03-14T14:00:00.000Z Updated: 2024-08-06T03:14:42.315Z Open on db.gcve.eu Reference links http://www.debian.org/security/2017/dsa-3853 http://www.securityfocus.com/bid/95935 https://bugs.bitlbee.org/ticket/1281 http://www.openwall.com/lists/oss-security/2017/01/31/11 http://www.openwall.com/lists/oss-security/2017/01/30/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1187`	vulnerable	2026-06-08 05:00:48.170562	Details available Bitlbee does not drop extra group privileges correctly in unix.c Published: 2019-10-29T13:00:11.000Z Updated: 2024-08-06T18:53:36.263Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2012-1187 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1187 https://access.redhat.com/security/cve/cve-2012-1187 https://bugs.bitlbee.org/ticket/852	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3969`	vulnerable	2026-06-08 04:50:37.372507	Details available Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920. Published: 2008-09-10T15:00:00.000Z Updated: 2024-08-07T10:00:42.590Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/09/08/1 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00587.html http://www.securityfocus.com/bid/31342 http://www.openwall.com/lists/oss-security/2008/09/09/11 https://exchange.xforce.ibmcloud.com/vulnerabilities/45132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3920`	vulnerable	2026-06-08 04:50:37.195969	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.