CVE-2020-9760 - An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected)

Back Back to CVE browser

CRITICAL

An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected)

Published Mar 23, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.25%

Description

An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30539
Advisory
https://github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197f
x_refsource_MISCPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://security.gentoo.org/glsa/202003-51
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://weechat.org/doc/security/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30539		Advisory
https://github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197f		x_refsource_MISCPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://security.gentoo.org/glsa/202003-51		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://weechat.org/doc/security/		x_refsource_MISCVendor Advisory