Bitlbee · Bitlbee-Libpurple · CVE-2017-5668
**Name of the Vulnerable Software and Affected Versions**
bitlbee-libpurple versions prior to 3.5.1
**Description**
The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference, and possibly execute arbitrary code. This can be achieved via a file transfer request for a contact that is not in the contact list.
**Recommendations**
For versions prior to 3.5.1, update to version 3.5.1 or later to resolve the issue.