CVE-2024-46613
Fixed in a distro release EPSS <1%CVSS 4.3
WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.
Products: weechat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | weechat | no fix |
| Debian 13 | weechat | 4.4.2-1 |
| Debian 14 | weechat | 4.4.2-1 |
| Ubuntu 22.04 LTS | weechat | no fix |
| Ubuntu 24.04 LTS | weechat | no fix |
| Ubuntu Pro 16.04 LTS | weechat | no fix |
| Ubuntu Pro 18.04 LTS | weechat | no fix |
| Ubuntu Pro 20.04 LTS | weechat | no fix |
| openSUSE Tumbleweed | weechat | 4.5.1-1.1 |