Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.703836
Kategorie:Debian Local Security Checks
Titel:Debian Security Advisory DSA 3836-1 (weechat - security update)
Zusammenfassung:It was discovered that weechat, a fast and light chat client, is prone;to a buffer overflow vulnerability in the IRC plugin, allowing a remote;attacker to cause a denial-of-service by sending a specially crafted;filename via DCC.
Beschreibung:Summary:
It was discovered that weechat, a fast and light chat client, is prone
to a buffer overflow vulnerability in the IRC plugin, allowing a remote
attacker to cause a denial-of-service by sending a specially crafted
filename via DCC.

Affected Software/OS:
weechat on Debian Linux

Solution:
For the stable distribution (jessie), this problem has been fixed in
version 1.0.1-1+deb8u1.

For the unstable distribution (sid), this problem has been fixed in
version 1.7-3.

We recommend that you upgrade your weechat packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-8073
BugTraq ID: 97987
http://www.securityfocus.com/bid/97987
Debian Security Information: DSA-3836 (Google Search)
http://www.debian.org/security/2017/dsa-3836
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ASRTCQFFDAAK347URWNDH6NSED2BGNY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3LAJTLI3LWZRNCFYJ7PCBBTHUMCCBHH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ER23GT23US5JXDLUZAMGMWXKZ74MI4S2/
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.