openSUSE Security Update : weechat (openSUSE-2017-1111)

This update for weechat fixes the following issues : - CVE-2017-14727: A uninitialized buffer could be used to crash the logger plugin in WeeChat boo1060140 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Debian DLA-1111-1 : weechat security update

It was discovered that WeeChat's logger plugin is vulnerable to an invalid buffer read which can be exploited remotely to trigger an application crash or other undefined behaviour. For Debian 7 'Wheezy', these problems have been fixed in version 0.3.8-1+deb7u3. We recommend that you upgrade your...

[SECURITY] [DLA 1111-1] weechat security update

Package : weechat Version : 0.3.8-1+deb7u3 CVE ID : CVE-2017-14727 Debian Bug : 876553 It was discovered that WeeChats logger plugin is vulnerable to an invalid buffer read which can be exploited remotely to trigger an application crash or other undefined behaviour. For Debian 7 "Wheezy", these...

DLA-1111-1 weechat - security update

Bulletin has no description...

FreeBSD : weechat -- crash in logger plugin (b63421b6-a1e0-11e7-ac58-b499baebfeaf)

WeeChat reports : security problem: a crash can happen in logger plugin when converting date/time specifiers in file mask. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-20...

Wee Enhanced Environment for Chat logger plugin denial of service vulnerability

WeeChat Wee Enhanced Environment for Chat is an efficient lightweight IRC chat client. logger plugin is one of the logger plugins. A security vulnerability exists in the logger.c file of the logger plugin in versions of WeeChat prior to 1.9.1, which stems from the program failing to initialize a...

[ASA-201709-20] weechat: denial of service

Arch Linux Security Advisory ASA-201709-20 ========================================== Severity: Medium Date : 2017-09-25 CVE-ID : CVE-2017-14727 Package : weechat Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-412 Summary ======= The package weechat before version...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

ALPINE-CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

DEBIAN-CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

Buffer overflow

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

UBUNTU-CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

CVE-2017-14727

Summary: CVE-2017-14727 affects WeeChat’s logger plugin prior to 1.9.1. The vulnerability arises in logger.c where, when handling date/time specifiers, a buffer is not initialized, allowing a remote crash via crafted strftime usage. Impact: Remote crash of the WeeChat client (logger plugin) due t...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

weechat -- crash in logger plugin

WeeChat reports: security problem: a crash can happen in logger plugin when converting date/time specifiers in file mask...

Fedora 26 : weechat (2017-fda9cb3a3a)

Fix for CVE-2017-8073 and various other changes. See https://weechat.org/files/changelog/ChangeLog-devel.htmlv1.7.1 for full changelog. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...