logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade weechat | Oct 25, 2017 | Sep 23, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 23, 2017 |
| Debian | — | Upgrade weechat | Feb 25, 2019 | Sep 23, 2017 |
| Freebsd | — | Upgrade weechat | Dec 10, 2025 | Sep 25, 2017 |
| Suse | — | Upgrade weechat-pythonUpgrade weechat-aspell-debuginfoUpgrade weechat-perlUpgrade weechat-debuginfoUpgrade weechat-aspellUpgrade weechat-guileUpgrade weechat-rubyUpgrade weechat-tcl-debuginfoUpgrade weechat-ruby-debuginfoUpgrade weechat-luaUpgrade weechat-develUpgrade weechat-python-debuginfoUpgrade weechat-lua-debuginfoUpgrade weechat-langUpgrade weechat-guile-debuginfoUpgrade weechat-debugsourceUpgrade weechat-docUpgrade weechat-perl-debuginfoUpgrade weechatUpgrade weechat-tcl | Oct 2, 2017 | Sep 23, 2017 |
| Ubuntu | — | Upgrade weechat-core (Ubuntu Pro)Upgrade weechat-tcl (Ubuntu Pro)Upgrade weechat-php (Ubuntu Pro)Upgrade weechat-python (Ubuntu Pro)Upgrade weechat-lua (Ubuntu Pro)Upgrade weechat-plugins (Ubuntu Pro)Upgrade weechat-ruby (Ubuntu Pro)Upgrade weechat (Ubuntu Pro)Upgrade weechat-guile (Ubuntu Pro)Upgrade weechat-perl (Ubuntu Pro)Upgrade weechat-headless (Ubuntu Pro)Upgrade weechat-curses (Ubuntu Pro) | Mar 22, 2023 | Sep 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub