CVE-2020-9760

Katalog CVE

CVSS 9.8 · Critical EPSS 2,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada weechat, debian linux. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.

Rincian

Terbit di NVD

23 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://weechat.org/doc/security/ advisory vendor
• https://github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197f patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202003-51 advisory pihak ketiga