Medium severity4.5NVD Advisory· Published May 28, 2017· Updated Jun 17, 2026

CVE-2016-10376

Description

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gajim/Gajim2 versions
cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:*range: <=0.16.7
- (no CPE)range: <=0.16.7
osv-coords
pkg:rpm/opensuse/gajim&distro=openSUSE%20Tumbleweed
Range: < 1.3.2-1.2

Patches

Vulnerability mechanics

References

dev.gajim.org/gajim/gajim/commit/cb65cfc5aed9efe05208ebbb7fb2d41fcf7253ccnvdPatchVendor Advisory
dev.gajim.org/gajim/gajim/issues/8378nvdPatchVendor Advisory
bugs.debian.org/863445nvdThird Party Advisory
mail.jabber.org/pipermail/standards/2016-August/031335.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2017/dsa-3943nvd
security.gentoo.org/glsa/201707-14nvd

News mentions

No linked articles in our index yet.

cvss	0.293
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000