Vulnerabilities > Bitlbee
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-10-29 | CVE-2012-1187 | Improper Check for Dropped Privileges vulnerability in Bitlbee 3.0.4 Bitlbee does not drop extra group privileges correctly in unix.c | 9.8 |
| 2017-03-14 | CVE-2017-5668 | NULL Pointer Dereference vulnerability in Bitlbee and Bitlbee-Libpurple bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. | 9.8 |
| 2017-03-14 | CVE-2016-10189 | NULL Pointer Dereference vulnerability in Bitlbee and Bitlbee-Libpurple BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. | 7.5 |
| 2017-03-14 | CVE-2016-10188 | Use After Free vulnerability in Bitlbee Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire. | 9.8 |