Vulnerabilities (CVE)

Filtered by vendor Weechat Subscribe
Filtered by product Weechat
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-8955 1 Weechat 1 Weechat 2021-09-30 7.5 HIGH 9.8 CRITICAL
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).
CVE-2020-9760 1 Weechat 1 Weechat 2021-09-30 7.5 HIGH 9.8 CRITICAL
An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.