Описание
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
Ссылки
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- PatchThird Party Advisory
- PatchVendor Advisory
- Release NotesVendor Advisory
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- PatchThird Party Advisory
- PatchVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
WeeChat before 1.7.1 allows a remote crash by sending a filename via D ...
WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
ALT-PU-2017-1923: package `weechat` update to version 1.9-alt1
EPSS
7.5 High
CVSS3
5 Medium
CVSS2