UBUNTU-CVE-2016-2379

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2016-2379

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2379.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2016-2379

Upstream

CVE-2016-2379

Published

2017-03-29T20:59:00Z

Modified

2025-10-24T04:45:38Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - low

Summary

[none]

Details

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

References

Affected packages

Ubuntu:14.04:LTS / pidgin

Package

Name: pidgin
Purl: pkg:deb/ubuntu/pidgin@1:2.10.9-0ubuntu3.4?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:2.*

1:2.10.7-0ubuntu4.1

1:2.10.7-0ubuntu4.2

1:2.10.9-0ubuntu1

1:2.10.9-0ubuntu2

1:2.10.9-0ubuntu3

1:2.10.9-0ubuntu3.1

1:2.10.9-0ubuntu3.2

1:2.10.9-0ubuntu3.3

1:2.10.9-0ubuntu3.4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "finch",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "finch-dev",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "libpurple-bin",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "libpurple-dev",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "libpurple0",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "pidgin",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "pidgin-data",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        },
        {
            "binary_name": "pidgin-dev",
            "binary_version": "1:2.10.9-0ubuntu3.4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2379.json"

Ubuntu:16.04:LTS / pidgin

Package

Name: pidgin
Purl: pkg:deb/ubuntu/pidgin@1:2.10.12-0ubuntu5.2?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:2.*

1:2.10.11-0ubuntu4

1:2.10.11-0ubuntu5

1:2.10.12-0ubuntu1

1:2.10.12-0ubuntu2

1:2.10.12-0ubuntu3

1:2.10.12-0ubuntu4

1:2.10.12-0ubuntu5

1:2.10.12-0ubuntu5.1

1:2.10.12-0ubuntu5.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "finch",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "finch-dev",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "libpurple-bin",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "libpurple-dev",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "libpurple0",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "pidgin",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "pidgin-data",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        },
        {
            "binary_name": "pidgin-dev",
            "binary_version": "1:2.10.12-0ubuntu5.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-2379.json"