CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

WeeChat prior to 2.7.1 (affecting 0.3.4–2.7) contains a buffer overflow in handling IRC message 005 when longer nick prefixes trigger a new nick mode; this can crash the client (denial of service). Upgrading to WeeChat 2.7.1 or newer is the stated mitigation. Related advisories reference CVE-2020...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

An out-of-bounds heap buffer access flaw was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in tcpemu routine while emulating IRC and other protocols due to unsafe usage of the snprintf3 function. A user or process could use this flaw to crash the QEMU process...

Fedora: Security Advisory for weechat (FEDORA-2020-4d232b48b8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for weechat (FEDORA-2020-db890b4800)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: weechat-2.7.1-1.fc31

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

[SECURITY] Fedora 30 Update: weechat-2.7.1-1.fc30

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

[SECURITY] Fedora 30 Update: seamonkey-2.53.1-2.fc30

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

[SECURITY] Fedora 31 Update: seamonkey-2.53.1-2.fc31

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Updated weechat packages fix security vulnerability

Updated weechat packages fix security vulnerability: ircmodechannelupdate in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a malformed IRC message 324 channel...

openSUSE Security Update : weechat (openSUSE-2020-248)

This update for weechat fixes the following security issue : - CVE-2020-8955: Fixed a buffer overflow in plugins/irc/irc-mode.c that allowed attackers to cause a denial of service bsc1163889. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

WeeChat -- Multiple vulnerabilities

The WeeChat project reports: Buffer overflow when receiving a malformed IRC message 324 channel mode. CVE-2020-8955 Buffer overflow when a new IRC message 005 is received with longer nick prefixes. Crash when receiving a malformed IRC message 352 WHO...

WeeChat Buffer Overflow Vulnerability

WeeChat is a fast, lightweight and scalable chat client that runs on multiple platforms such as Linux, Unix, BSD, GNU Hurd, Mac OS X and Windows. A buffer overflow vulnerability exists in the ircmodechannelupdate file in plugins/irc/irc-mode.c in WeeChat 2.7 and earlier versions. A remote attacke...

CVE-2020-8955

ircmodechannelupdate in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a malformed IRC message 324 channel mode...

CVE-2020-8955

ircmodechannelupdate in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a malformed IRC message 324 channel mode...

DEBIAN-CVE-2020-8955

ircmodechannelupdate in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a malformed IRC message 324 channel mode...

CVE-2020-8955

ircmodechannelupdate in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a malformed IRC message 324 channel mode...