Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-46613

Опубликовано: 10 нояб. 2024
Источник: nvd
CVSS3: 9.8
CVSS3: 4.3
EPSS Низкий

Описание

WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:weechat:weechat:*:*:*:*:*:*:*:*
Версия от 0.1.6 (включая) до 4.4.2 (исключая)

EPSS

Процентиль: 57%
0.00346
Низкий

9.8 Critical

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 года назад

WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.

CVSS3: 9.8
debian
около 1 года назад

WeeChat before 4.4.2 has an integer overflow and resultant buffer over ...

CVSS3: 9.8
github
около 1 года назад

WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.

EPSS

Процентиль: 57%
0.00346
Низкий

9.8 Critical

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-190
CWE-190