WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

New version, fixes a lot of bugs (some of them security). In the same update, fixed up epel7 build to latest version as well.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2017-8073 and various other changes. See https://weechat.org/files/changelog/ChangeLog-devel.html#v1.7.1 for full changelog.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for weechat fixes one security issues :

  - CVE-2017-8073: WeeChat allowed a remote crash by sending     a filename via DCC to the IRC plugin. This occurs in the     irc_ctcp_dcc_filename_without_quotes function during     quote removal, with a buffer overflow (bsc#1036467).

It was discovered that weechat, a fast and light chat client, is prone to a buffer overflow vulnerability in the IRC plugin, allowing a remote attacker to cause a denial-of-service by sending a specially crafted filename via DCC.

WeeChat before allows a remote crash by sending a filename via DCC to the IRC plugin.

For Debian 7 'Wheezy', these problems have been fixed in version 0.3.8-1+deb7u2.

We recommend that you upgrade your weechat packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Common Vulnerabilities and Exposures :

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

ID	Name	Product	Family	Severity
134639	Fedora 31 : weechat (2020-db890b4800)	Nessus	Fedora Local Security Checks	critical
134635	Fedora 30 : weechat (2020-4d232b48b8)	Nessus	Fedora Local Security Checks	critical
101754	Fedora 26 : weechat (2017-fda9cb3a3a)	Nessus	Fedora Local Security Checks	high
100075	Fedora 24 : weechat (2017-9ccef781a6)	Nessus	Fedora Local Security Checks	high
100072	Fedora 25 : weechat (2017-20dd9f26cf)	Nessus	Fedora Local Security Checks	high
99958	openSUSE Security Update : weechat (openSUSE-2017-536)	Nessus	SuSE Local Security Checks	high
99716	Debian DSA-3836-1 : weechat - security update	Nessus	Debian Local Security Checks	high
99693	Debian DLA-919-1 : weechat security update	Nessus	Debian Local Security Checks	high
99646	FreeBSD : weechat -- multiple vulnerabilities (81433129-2916-11e7-ad3e-00e04c1ea73d)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-8073

high

Tenable Plugins

critical

critical

high

high

high

high

high

high

high