CVE-2016-2233
Fixed in a distro release EPSS 34%
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
Products: hexchat_project hexchat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | hexchat | 2.12.0-1 |
| Debian 13 | hexchat | 2.12.0-1 |
| Ubuntu 16.04 LTS | hexchat | no fix |
| Ubuntu 16.04 LTS | xchat-gnome | no fix |