CVE-2015-8688

Description

Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza.

Risk Information

Base Score
5.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.556

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2015-8688 are affected in Gajim (x64) 0.16.4Windows
gajim security update(DSA-3492-1) gajim_0.16-1+deb8u1_all.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-349705Gajim (x64) (2.3.3)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234