Vulnerability Details CVE-2020-8955
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.142
EPSS Ranking 94.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00032.html
- https://github.com/weechat/weechat/commit/6f4f147d8e86adf9ad34a8ffd7e7f1f23a7e74da
- https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html
- https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6NSED2BGNY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXKZ74MI4S2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBTHUMCCBHH/
- https://security.gentoo.org/glsa/202003-51
- https://weechat.org/doc/security/
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00032.html
- https://github.com/weechat/weechat/commit/6f4f147d8e86adf9ad34a8ffd7e7f1f23a7e74da
- https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html
- https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6NSED2BGNY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXKZ74MI4S2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBTHUMCCBHH/
- https://security.gentoo.org/glsa/202003-51
- https://weechat.org/doc/security/
Products affected by CVE-2020-8955
-
cpe:2.3:a:opensuse:backports_sle:15.0
-
cpe:2.3:a:weechat:weechat:0.3.8
-
cpe:2.3:a:weechat:weechat:0.3.9
-
cpe:2.3:a:weechat:weechat:0.3.9.1
-
cpe:2.3:a:weechat:weechat:0.3.9.2
-
cpe:2.3:a:weechat:weechat:0.4.0
-
cpe:2.3:a:weechat:weechat:0.4.1
-
cpe:2.3:a:weechat:weechat:0.4.2
-
cpe:2.3:a:weechat:weechat:0.4.3
-
cpe:2.3:a:weechat:weechat:1.0
-
cpe:2.3:a:weechat:weechat:1.0.1
-
cpe:2.3:a:weechat:weechat:1.1
-
cpe:2.3:a:weechat:weechat:1.1.1
-
cpe:2.3:a:weechat:weechat:1.2
-
cpe:2.3:a:weechat:weechat:1.3
-
cpe:2.3:a:weechat:weechat:1.4
-
cpe:2.3:a:weechat:weechat:1.5
-
cpe:2.3:a:weechat:weechat:1.6
-
cpe:2.3:a:weechat:weechat:1.7
-
cpe:2.3:a:weechat:weechat:1.7.1
-
cpe:2.3:a:weechat:weechat:1.8
-
cpe:2.3:a:weechat:weechat:1.9
-
cpe:2.3:a:weechat:weechat:1.9.1
-
cpe:2.3:a:weechat:weechat:2.0
-
cpe:2.3:a:weechat:weechat:2.0.1
-
cpe:2.3:a:weechat:weechat:2.1
-
cpe:2.3:a:weechat:weechat:2.2
-
cpe:2.3:a:weechat:weechat:2.3
-
cpe:2.3:a:weechat:weechat:2.4
-
cpe:2.3:a:weechat:weechat:2.5
-
cpe:2.3:a:weechat:weechat:2.6
-
cpe:2.3:a:weechat:weechat:2.7
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:fedoraproject:fedora:30
-
cpe:2.3:o:fedoraproject:fedora:31
-
cpe:2.3:o:fedoraproject:fedora:32
-
cpe:2.3:o:opensuse:leap:15.1