Bitlbee records

6 published records for vendor bitlbee.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-5668No exploit	bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly executbitlbee · bitlbee · CWE-476 pre-auth RCE Memory safety	Critical9.8	—	3.0%	Mar 14, 2017
40Plan	CVE-2016-10188No exploit	Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute bitlbee · bitlbee · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	2.9%	Mar 14, 2017
39Monitor	CVE-2012-1187No exploit	Bitlbee does not drop extra group privileges correctly in unix.cbitlbee · bitlbee · CWE-273 Pre-auth	Critical9.8	—	1.6%	Oct 29, 2019
31Monitor	CVE-2016-10189No exploit	BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary bitlbee · bitlbee · CWE-476 pre-auth RCE Memory safety Denial of service	High7.5	—	4.0%	Mar 14, 2017
31Monitor	CVE-2008-3920No exploit	Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectobitlbee · bitlbee · CWE-264 Pre-auth	High7.5	—	2.1%	Sep 4, 2008
21Monitor	CVE-2008-3969No exploit	Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknowbitlbee · bitlbee Pre-auth	Medium5.0	—	2.4%	Sep 10, 2008

CVE-2017-5668
40Plan
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execut
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
bitlbee · bitlbeeMar 14, 2017
CVE-2016-10188
40Plan
Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
bitlbee · bitlbeeMar 14, 2017
CVE-2012-1187
39Monitor
Bitlbee does not drop extra group privileges correctly in unix.c
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
bitlbee · bitlbeeOct 29, 2019
CVE-2016-10189
31Monitor
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary
HighCVSS 7.5No exploitEPSS 4%
bitlbee · bitlbeeMar 14, 2017
CVE-2008-3920
31Monitor
Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vecto
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
bitlbee · bitlbeeSep 4, 2008
CVE-2008-3969
21Monitor
Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknow
MediumCVSS 5.0No exploitEPSS 2%
- Pre-auth
bitlbee · bitlbeeSep 10, 2008