リモートホストは、GLSA-201701-38（Pidgin：複数の脆弱性）で説明されている脆弱性による影響を受けます。複数の脆弱性がPidginで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、特別に細工されたデータをMXitプロトコルを使用して送信する可能性があります。その結果、プロセスの権限で任意のコードがリモートで実行されたり、サービス拒否状態が引き起こされたり、機密情報が漏洩したりする可能性があります。回避策：現時点では、既知の回避策はありません。

远程主机受到 GLSA-201701-38 中所述漏洞的影响（Pidgin：多个漏洞）

    已在 Pidgin 中发现多种漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    远程攻击者可能使用 MXit 协议发送特制的数据，进而可能导致以进程的权限远程执行任意代码、拒绝服务情况，或泄露机密信息。
  变通方案：

    目前无任何已知的变通方案。

遠端主機受到 GLSA-201701-38 中所述的弱點影響 (Pidgin：多個弱點)

    在 Pidgin 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    遠端攻擊者可能使用 MXit 通訊協定傳送特製的資料，進而可能導致以處理程序的權限執行任意程式碼、造成拒絕服務情形，或洩漏機密資訊。
  因應措施：

    目前尚無已知的因應措施。

The remote host is affected by the vulnerability described in GLSA-201701-38 (Pidgin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Pidgin. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker might send specially crafted data using the MXit       protocol, possibly resulting in the remote execution of arbitrary code       with the privileges of the process, a Denial of Service condition, or in       leaking confidential information.
  Workaround :

    There is no known workaround at this time.

According to the version of the pidgin package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Pidgin version <2.11.0 contains a vulnerability in     X.509 Certificates imports specifically due to improper     check of return values from gnutls_x509_crt_init() and     gnutls_x509_crt_import() that can result in code     execution. This attack appear to be exploitable via     custom X.509 certificate from another     client.(CVE-2016-1000030)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the pidgin package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Pidgin version <2.11.0 contains a vulnerability in     X.509 Certificates imports specifically due to improper     check of return values from gnutls_x509_crt_init() and     gnutls_x509_crt_import() that can result in code     execution. This attack appear to be exploitable via     custom X.509 certificate from another client.
    (CVE-2016-1000030)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the pidgin package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Pidgin allows you to talk to anyone using a variety of     messaging protocols including AIM, MSN, Yahoo!, Jabber,     Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ,     Lotus Sametime, Simple and Zephyr. These protocols are     implemented using a modular, easy to use design. To use     a protocol, just add an account using the account     editor. Pidgin supports many common features of other     clients, as well as many unique features, such as perl     scripting, TCL scripting and C plugins. Pidgin is not     affiliated with or endorsed by America Online, Inc.,     Microsoft Corporation, Yahoo! Inc., or ICQ Inc.Security     Fix(es):Pidgin version <2.11.0 contains a vulnerability     in X.509 Certificates imports specifically due to     improper check of return values from     gnutls_x509_crt_init() and gnutls_x509_crt_import()     that can result in code execution. This attack appear     to be exploitable via custom X.509 certificate from     another client.(CVE-2016-1000030)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
96542	GLSA-201701-38：Pidgin：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/1/17	2021/1/11	critical
96542	GLSA-201701-38 : Pidgin：多个漏洞	Nessus	Gentoo Local Security Checks	2017/1/17	2021/1/11	critical
96542	GLSA-201701-38：Pidgin：多個弱點	Nessus	Gentoo Local Security Checks	2017/1/17	2021/1/11	critical
96542	GLSA-201701-38 : Pidgin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/17	2021/1/11	critical
142268	EulerOS 2.0 SP2 : pidgin (EulerOS-SA-2020-2385)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	critical
140829	EulerOS 2.0 SP3 : pidgin (EulerOS-SA-2020-2062)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	critical
142072	EulerOS 2.0 SP5 : pidgin (EulerOS-SA-2020-2262)	Nessus	Huawei Local Security Checks	2020/10/30	2024/2/13	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical