Common Vulnerabilities and Exposures :

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

New version, fixes a lot of bugs (some of them security). In the same update, fixed up epel7 build to latest version as well.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that weechat, a fast and light chat client, is prone to a buffer overflow vulnerability in the IRC plugin, allowing a remote attacker to cause a denial-of-service by sending a specially crafted filename via DCC.

This update for weechat fixes one security issues :

  - CVE-2017-8073: WeeChat allowed a remote crash by sending     a filename via DCC to the IRC plugin. This occurs in the     irc_ctcp_dcc_filename_without_quotes function during     quote removal, with a buffer overflow (bsc#1036467).

Fix for CVE-2017-8073 and various other changes. See https://weechat.org/files/changelog/ChangeLog-devel.html#v1.7.1 for full changelog.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

WeeChat before allows a remote crash by sending a filename via DCC to the IRC plugin.

For Debian 7 'Wheezy', these problems have been fixed in version 0.3.8-1+deb7u2.

We recommend that you upgrade your weechat packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
99646	FreeBSD : weechat -- multiple vulnerabilities (81433129-2916-11e7-ad3e-00e04c1ea73d)	Nessus	FreeBSD Local Security Checks	4/25/2017	1/4/2021	high
134639	Fedora 31 : weechat (2020-db890b4800)	Nessus	Fedora Local Security Checks	3/18/2020	3/21/2024	critical
99716	Debian DSA-3836-1 : weechat - security update	Nessus	Debian Local Security Checks	4/28/2017	1/11/2021	high
99958	openSUSE Security Update : weechat (openSUSE-2017-536)	Nessus	SuSE Local Security Checks	5/3/2017	1/19/2021	high
100075	Fedora 24 : weechat (2017-9ccef781a6)	Nessus	Fedora Local Security Checks	5/10/2017	1/6/2021	high
99693	Debian DLA-919-1 : weechat security update	Nessus	Debian Local Security Checks	4/27/2017	1/11/2021	high
101754	Fedora 26 : weechat (2017-fda9cb3a3a)	Nessus	Fedora Local Security Checks	7/17/2017	1/6/2021	high
100072	Fedora 25 : weechat (2017-20dd9f26cf)	Nessus	Fedora Local Security Checks	5/10/2017	1/11/2021	high
134635	Fedora 30 : weechat (2020-4d232b48b8)	Nessus	Fedora Local Security Checks	3/18/2020	3/21/2024	critical

Detections

Analytics

Plugins Search

high

critical

high

high

high

high

high

high

critical