• info
• discussion
• exploit
• solution
• references

EKG Libgadu Multiple Memory Alignment Remote Denial of Service Vulnerabilities

Solution:
Vendor upgrades are available. Please see the referenced advisories for more information.


Slackware Linux -current

• Slackware gaim-1.5.0-i486-1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/ gaim-1.5.0-i486-1.tgz

ekg ekg 2005-04-11

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

ekg ekg 2005-06-05 22:03

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

ekg ekg 1.1

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

Rob Flynn Gaim 1.2.1

• Debian gaim-data_1.2.1-1.4_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-data_1.2.1-1. 4_all.deb


• Debian gaim-dev_1.2.1-1.4_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _alpha.deb


• Debian gaim-dev_1.2.1-1.4_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _amd64.deb


• Debian gaim-dev_1.2.1-1.4_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _arm.deb


• Debian gaim-dev_1.2.1-1.4_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _hppa.deb


• Debian gaim-dev_1.2.1-1.4_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _i386.deb


• Debian gaim-dev_1.2.1-1.4_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _ia64.deb


• Debian gaim-dev_1.2.1-1.4_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _m68k.deb


• Debian gaim-dev_1.2.1-1.4_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _mips.deb


• Debian gaim-dev_1.2.1-1.4_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _mipsel.deb


• Debian gaim-dev_1.2.1-1.4_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _powerpc.deb


• Debian gaim-dev_1.2.1-1.4_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _s390.deb


• Debian gaim-dev_1.2.1-1.4_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim-dev_1.2.1-1.4 _sparc.deb


• Debian gaim_1.2.1-1.4_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_alp ha.deb


• Debian gaim_1.2.1-1.4_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_amd 64.deb


• Debian gaim_1.2.1-1.4_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_arm .deb


• Debian gaim_1.2.1-1.4_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_hpp a.deb


• Debian gaim_1.2.1-1.4_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_i38 6.deb


• Debian gaim_1.2.1-1.4_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_ia6 4.deb


• Debian gaim_1.2.1-1.4_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_m68 k.deb


• Debian gaim_1.2.1-1.4_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_mip s.deb


• Debian gaim_1.2.1-1.4_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_mip sel.deb


• Debian gaim_1.2.1-1.4_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_pow erpc.deb


• Debian gaim_1.2.1-1.4_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_s39 0.deb


• Debian gaim_1.2.1-1.4_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/g/gaim/gaim_1.2.1-1.4_spa rc.deb

ekg ekg 1.3

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

ekg ekg 1.4

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

ekg ekg 1.5

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz


• Ubuntu ekg_1.5-4ubuntu1.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.5-4ubuntu1 .2_amd64.deb


• Ubuntu ekg_1.5-4ubuntu1.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.5-4ubuntu1 .2_i386.deb


• Ubuntu ekg_1.5-4ubuntu1.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/e/ekg/ekg_1.5-4ubuntu1 .2_powerpc.deb


• Ubuntu libgadu-dev_1.5-4ubuntu1.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.5-4ubu ntu1.2_amd64.deb


• Ubuntu libgadu-dev_1.5-4ubuntu1.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.5-4ubu ntu1.2_i386.deb


• Ubuntu libgadu-dev_1.5-4ubuntu1.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu-dev_1.5-4ubu ntu1.2_powerpc.deb


• Ubuntu libgadu3_1.5-4ubuntu1.2_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.5-4ubuntu 1.2_amd64.deb


• Ubuntu libgadu3_1.5-4ubuntu1.2_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.5-4ubuntu 1.2_i386.deb


• Ubuntu libgadu3_1.5-4ubuntu1.2_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/e/ekg/libgadu3_1.5-4ubuntu 1.2_powerpc.deb

ekg ekg 1.6 rc2

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

ekg ekg 1.6 rc1

• ekg ekg-1.6rc3.tar.gz
  http://dev.null.pl/ekg/ekg-1.6rc3.tar.gz

SGI ProPack 3.0 SP6

• SGI Patch 10197
  ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS

Centericq Centericq 4.20

• Debian centericq-common_4.20.0-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_alpha.deb


• Debian centericq-common_4.20.0-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/http://securi ty.debian.org/pool/updates/main/c/centericq/centericq-common_4.20.0-1s arge2_alpha.deb


• Debian centericq-common_4.20.0-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_amd64.deb


• Debian centericq-common_4.20.0-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_arm.deb


• Debian centericq-common_4.20.0-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_hppa.deb


• Debian centericq-common_4.20.0-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_i386.deb


• Debian centericq-common_4.20.0-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_ia64.deb


• Debian centericq-common_4.20.0-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_m68k.deb


• Debian centericq-common_4.20.0-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_mips.deb


• Debian centericq-common_4.20.0-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_mipsel.deb


• Debian centericq-common_4.20.0-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_powerpc.deb


• Debian centericq-common_4.20.0-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_s390.deb


• Debian centericq-common_4.20.0-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge2_sparc.deb


• Debian centericq-fribidi_4.20.0-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_alpha.deb


• Debian centericq-fribidi_4.20.0-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_amd64.deb


• Debian centericq-fribidi_4.20.0-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_arm.deb


• Debian centericq-fribidi_4.20.0-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_hppa.deb


• Debian centericq-fribidi_4.20.0-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_i386.deb


• Debian centericq-fribidi_4.20.0-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_ia64.deb


• Debian centericq-fribidi_4.20.0-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_m68k.deb


• Debian centericq-fribidi_4.20.0-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_mips.deb


• Debian centericq-fribidi_4.20.0-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_mipsel.deb


• Debian centericq-fribidi_4.20.0-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_powerpc.deb


• Debian centericq-fribidi_4.20.0-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_s390.deb


• Debian centericq-fribidi_4.20.0-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge2_sparc.deb


• Debian centericq-utf8_4.20.0-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_alpha.deb


• Debian centericq-utf8_4.20.0-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_amd64.deb


• Debian centericq-utf8_4.20.0-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_arm.deb


• Debian centericq-utf8_4.20.0-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_hppa.deb


• Debian centericq-utf8_4.20.0-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_i386.deb


• Debian centericq-utf8_4.20.0-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_ia64.deb


• Debian centericq-utf8_4.20.0-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_m68k.deb


• Debian centericq-utf8_4.20.0-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_mips.deb


• Debian centericq-utf8_4.20.0-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_mipsel.deb


• Debian centericq-utf8_4.20.0-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_powerpc.deb


• Debian centericq-utf8_4.20.0-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_s390.deb


• Debian centericq-utf8_4.20.0-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge2_sparc.deb


• Debian centericq_4.20.0-1sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_alpha.deb


• Debian centericq_4.20.0-1sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_amd64.deb


• Debian centericq_4.20.0-1sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_arm.deb


• Debian centericq_4.20.0-1sarge2_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_hppa.deb


• Debian centericq_4.20.0-1sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_i386.deb


• Debian centericq_4.20.0-1sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_ia64.deb


• Debian centericq_4.20.0-1sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_m68k.deb


• Debian centericq_4.20.0-1sarge2_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_mips.deb


• Debian centericq_4.20.0-1sarge2_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_mipsel.deb


• Debian centericq_4.20.0-1sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_powerpc.deb


• Debian centericq_4.20.0-1sarge2_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_s390.deb


• Debian centericq_4.20.0-1sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge2_sparc.deb