CVE-2020-8955
Fixed in a distro release EPSS 3%
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
Products: weechat, fedoraproject fedora, opensuse backports_sle, opensuse leap, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | weechat | 2.7.1-1 |
| Debian 12 | weechat | 2.7.1-1 |
| Debian 13 | weechat | 2.7.1-1 |
| Debian 14 | weechat | 2.7.1-1 |
| Debian 8 | weechat | 1.0.1-1+deb8u3 |
| Debian 9 | weechat | 1.6-1+deb9u3 |
| SUSE Package Hub 15 | weechat | 2.1-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | weechat | 2.1-bp151.4.3.1 |
| Ubuntu Pro 16.04 LTS | weechat | 1.4-2ubuntu0.1+esm1 |
| Ubuntu Pro 18.04 LTS | weechat | 1.9.1-1ubuntu1+esm1 |
| Ubuntu Pro 20.04 LTS | weechat | 2.8-1ubuntu0.1~esm1 |
| openSUSE Leap 15.1 | weechat | 2.1-bp151.4.3.1 |
| openSUSE Tumbleweed | weechat | 3.2-1.3 |