CVE-2019-16235

Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.

Link	Resource
https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc549c930	Patch Third Party Advisory
https://gultsch.de/dino_multiple.html	Exploit Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/09/12/5	Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/31	Issue Tracking Mailing List
https://www.debian.org/security/2019/dsa-4524	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YUBM7GDZBB6MZZALDWYRAPNV6HJNLNMC/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5TMGQ5Q6QMIFG4NVUWMOWW3GIPGWQZVF/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZBNQAOBWTIOKNO4PIYNX624ACGUXSXQ/	Third Party Advisory
https://usn.ubuntu.com/4306-1/	Third Party Advisory

Configuration 1

cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

---

Published : 2019-09-11 07:15

Updated : 2020-09-14 02:26

---

NVD link : CVE-2019-16235

Mitre link : CVE-2019-16235

No products.

CWE-346