Bitlbee
Vendor:
First CVE: Sep 4, 2008 · Active for 17 years
6
Total CVEs
More Total CVEs than 80% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bitlbee over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 4, 2008
17 years ago
Most Recent CVE
Oct 29, 2019
2,460 days ago
CVE Severity & Scoring
Bitlbee6 CVEs
17%
33%
50%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network4 (66.7%)
Unknown2 (33.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (66.7%)
High0 (0.0%)
Unknown2 (33.3%)
User Interaction
None4 (66.7%)
Unknown2 (33.3%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (66.7%)
Unknown2 (33.3%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-1187CRITICAL Bitlbee does not drop extra group privileges correctly in unix.c | Oct 29, 2019 | 9.8 | 31 | NO | NO |
CVE-2017-5668CRITICAL bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer req | Mar 14, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-10188CRITICAL Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfe | Mar 14, 2017 | 9.8 | 31 | NO | NO |
CVE-2016-10189HIGH BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a c | Mar 14, 2017 | 7.5 | 26 | NO | NO |
CVE-2008-3920HIGH Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors. | Sep 4, 2008 | 7.5 | 20 | NO | NO |
CVE-2008-3969MEDIUM Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handl | Sep 11, 2008 | 5.0 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Bitlbee
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0.4 | 1 | 9.8 | 1.7% | 0 | 0 |
| 1.2 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.1.1 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.1 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.0.4 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.0.3 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.0.2 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.0.1 | 1 | 7.5 | 2.1% | 0 | 0 |
| 1.0 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.99 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.93 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.92 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.91 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.90 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.85 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.84 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.83 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.82 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.81 | 1 | 7.5 | 2.1% | 0 | 0 |
| 0.80 | 1 | 7.5 | 2.1% | 0 | 0 |