Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-40516

Опубликовано: 05 сент. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

not-affected

3.2.1-1
esm-apps-legacy/xenial

released

1.4-2ubuntu0.1+esm1
esm-apps/bionic

released

1.9.1-1ubuntu1+esm1
esm-apps/focal

released

2.8-1ubuntu0.1~esm1
esm-apps/jammy

not-affected

3.2.1-1
esm-apps/noble

not-affected

3.2.1-1
esm-apps/xenial

released

1.4-2ubuntu0.1+esm1
esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed

Показывать по

EPSS

Процентиль: 76%
0.01594
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.

CVSS3: 7.5
debian
около 5 лет назад

WeeChat before 3.2.1 allows remote attackers to cause a denial of serv ...

suse-cvrf
больше 4 лет назад

Security update for weechat

github
больше 4 лет назад

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.

CVSS3: 7.5
altlinux
больше 4 лет назад

ALT-PU-2022-1588: package `weechat` update to version 3.5-alt1

EPSS

Процентиль: 76%
0.01594
Низкий

5 Medium

CVSS2

7.5 High

CVSS3