CVE-2016-2371: canonical ubuntu_linux Out-of-bounds Write
CVSS: 8.1v3.0HighModified
AliasesUBUNTU-CVE-2016-2371DEBIAN-CVE-2016-2371
Published 06-01-2017Last modified 05-08-2024
Vulnerability summary
CVE-2016-2371 is a high (CVSS 8.1) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 3.16% chance of exploitation in the next 30 days, higher than 87.8% of scored vulnerabilities.
CVSS score
8.1/10
010
High · v3.0 (NVD)EPSS score
3.16%
0%100%
Low · -0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 2Timeline
- 06-01-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the server could cause memory corruption resulting in code execution.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 8.1Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.16%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
-0.01 pp
From 3.17% on 20-09-2026
20-09-202620-10-2026
EPSS score3.16%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- pidgin< 2.11.0-1
- debian_linuxEOL8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Pidgin1 product
- pidgin2.10.11 | ≤ 2.10.12
Ubuntu1 product
- pidgin< 1:2.10.9-0ubuntu3.3 | < 1:2.10.12-0ubuntu5.1
4 vendors · 5 products
References
11 links- www.talosintelligence.com/reports/TALOS-2016-0139/X Refsource MISCTechnical DescriptionThird Party Advisory
