CVE-2017-8073

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin

published April 23, 2017

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03107 · 87.6th percentile
Published
2017-04-23T15:00Z
EPSS history
Timeline
  • 23 APR 15:00Z
    WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin
    cvelistv5