CVE-2017-14727

Опубликовано: 23 сент. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.

Ссылки

http://www.securityfocus.com/bid/101003
Third Party Advisory
VDB Entry
https://github.com/weechat/weechat/commit/f105c6f0b56fb5687b2d2aedf37cb1d1b434d556
Patch
Third Party Advisory
https://weechat.org/download/security/
Vendor Advisory
https://weechat.org/news/98/20170923-Version-1.9.1-security-release/
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/101003
Third Party Advisory
VDB Entry
https://github.com/weechat/weechat/commit/f105c6f0b56fb5687b2d2aedf37cb1d1b434d556
Patch
Third Party Advisory
https://weechat.org/download/security/
Vendor Advisory
https://weechat.org/news/98/20170923-Version-1.9.1-security-release/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:weechat:logger:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:weechat:weechat:0.3.2:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.3:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.4:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.5:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.6:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.7:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.8:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.9:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.9.1:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.3.9.2:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.5.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.7.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.8.0:*:*:*:*:*:*:*

cpe:2.3:a:weechat:weechat:1.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00658

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-14727

CVSS3: 7.5

ubuntu

больше 8 лет назад

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.

CVE-2017-14727

CVSS3: 7.5

debian

больше 8 лет назад

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash v ...

openSUSE-SU-2017:2607-1

suse-cvrf

больше 8 лет назад

Security update for weechat

GHSA-ppv9-cgrm-wr3p

CVSS3: 7.5

github

больше 3 лет назад

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.

EPSS

Процентиль: 71%

0.00658

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119