CVE-2016-10189

Name of the Vulnerable Software and Affected Versions BitlBee versions prior to 3.5

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, and possibly execute arbitrary code. This can be achieved via a file transfer request for a contact that is not in the contact list.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue.