Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2020-0122 Security Update For Weechat Denial Of Service Issue

mageia
Calendar Grey March 6, 2020
Dist Mageia Esm H88
WeeChat components refreshed to address security flaws associated with a memory overflow and service disruption vulnerability.
Updated weechat packages fix security vulnerability: irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service ...

Summary

Updated weechat packages fix security vulnerability:
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode)(CVE-2020-8955).

References

- https://bugs.mageia.org/show_bug.cgi?id=26267

- - https://www.cve.org/CVERecord?id=CVE-2020-8955

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow weechat Mageia irc_mode_channel_update

Resolution

SRPMS

- 7/core/weechat-2.4-2.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0122.html
Type: security
CVE: CVE-2020-8955

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow weechat Mageia irc_mode_channel_update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here