VDB
GCVE-110-MAGEIA-2020-153
GCVE-110-MAGEIA-2020-153
Advisory Published
Updated weechat packages fix security vulnerabilities:
An issue was discovered in WeeChat before 2.7.1 (0.4.0 to 2.7 are
affected). A malformed message 352 (who) can cause a NULL pointer
dereference in the callback function, resulting in a crash
(CVE-2020-9759).
An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are
affected). When a new IRC message 005 is received with longer nick
prefixes, a buffer overflow and possibly a crash can happen when a
new mode is set for a nick (CVE-2020-9760).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | php | 0 (affected), 7.3.19-2.mga7 (unaffected) | — |
| Mageia | weechat | 0 (affected), 2.7.1-1.mga7 (unaffected), 0 (affected), 2.7.1-1.mga7 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.