Lucene search

K
osvGoogleOSV:USN-5258-1
HistoryFeb 04, 2022 - 4:38 p.m.

weechat vulnerabilities

2022-02-0416:38:24
Google
osv.dev
10

7.1 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

Stuart Nevans Locke discovered that WeeChat’s relay plugin insecurely handled
malformed websocket frames. A remote attacker in control of a server
could possibly use this issue to cause denial of service in a client.
(CVE-2021-40516)

Stuart Nevans Locke discovered that WeeChat insecurely handled certain
IRC messages. A remote attacker in control of a server could possibly use
this issue to cause denial of service in a client. This issue only affected
Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2020-9760)

Stuart Nevans Locke discovered that WeeChat insecurely handled certain
IRC messages. A remote unauthenticated attacker could possibly use these
issues to cause denial of service in a client. These issues only affected
Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2020-9759, CVE-2020-8955)

Joseph Bisch discovered that WeeChat’s logger incorrectly handled certain
memory operations when handling log file names. A remote attacker could possibly
use this issue to cause denial of service in a client. This issue only
affected Ubuntu 16.04 ESM. (CVE-2017-14727)