CVE-2019-16237

Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.

Link	Resource
https://github.com/dino/dino/commit/307f16cc86dd2b95aa02ab8a85110e4a2d5e7363	Patch Third Party Advisory
https://gultsch.de/dino_multiple.html	Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/09/12/5	Mailing List Patch
https://seclists.org/bugtraq/2019/Sep/31	Issue Tracking Mailing List
https://www.debian.org/security/2019/dsa-4524	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YUBM7GDZBB6MZZALDWYRAPNV6HJNLNMC/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5TMGQ5Q6QMIFG4NVUWMOWW3GIPGWQZVF/	Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZBNQAOBWTIOKNO4PIYNX624ACGUXSXQ/	Third Party Advisory
https://usn.ubuntu.com/4306-1/	Third Party Advisory

Configuration 1

cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

---

Published : 2019-09-11 07:15

Updated : 2020-09-14 02:27

---

NVD link : CVE-2019-16237

Mitre link : CVE-2019-16237

No products.

CWE-346