irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-weechat | Aug 22, 2024 | Feb 12, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 12, 2020 | |
| Debian | debian-upgrade-weechat | Mar 27, 2020 | Feb 12, 2020 | |
| Freebsd | freebsd-upgrade-package-weechat | Dec 10, 2025 | Feb 21, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-irc-weechat | Mar 27, 2020 | Feb 12, 2020 | |
| Suse | — | suse-upgrade-weechatsuse-upgrade-weechat-aspellsuse-upgrade-weechat-develsuse-upgrade-weechat-guilesuse-upgrade-weechat-langsuse-upgrade-weechat-luasuse-upgrade-weechat-perlsuse-upgrade-weechat-pythonsuse-upgrade-weechat-rubysuse-upgrade-weechat-tcl | Mar 3, 2020 | Feb 12, 2020 |
| Ubuntu | ubuntu-pro-upgrade-weechatubuntu-pro-upgrade-weechat-coreubuntu-pro-upgrade-weechat-cursesubuntu-pro-upgrade-weechat-guileubuntu-pro-upgrade-weechat-headlessubuntu-pro-upgrade-weechat-luaubuntu-pro-upgrade-weechat-perlubuntu-pro-upgrade-weechat-phpubuntu-pro-upgrade-weechat-pluginsubuntu-pro-upgrade-weechat-pythonubuntu-pro-upgrade-weechat-rubyubuntu-pro-upgrade-weechat-tcl | Mar 22, 2023 | Feb 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub