weechat

14 results · Feed

• High 7.4
  CVE-2026-53525

  WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

  WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext pas…

  weechat weechat weechat weechat Debian Ubuntu
  Aug 21, 2026
• Medium 6.5
  CVE-2026-53524

  WeeChat has a Decompression Bomb in Relay WebSocket (DoS)

  WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated re…

  weechat weechat weechat weechat Debian Ubuntu
  Aug 21, 2026
• Medium 4.3
  CVE-2024-46613

  WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more th…

  weechat weechat Debian Ubuntu
  Nov 10, 2024
• Medium 4.3
  CVE-2022-28352

  WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of…

  weechat weechat weechat Debian Ubuntu Alpine
  Apr 2, 2022
• Unscored —
  CVE-2021-40516

  WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that tr…

  weechat weechat weechat Debian Ubuntu Alpine
  Sep 5, 2021
• Unscored —
  CVE-2020-9760

  An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received wit…

  weechat weechat Debian Ubuntu
  Mar 23, 2020
• Medium 4.6
  CVE-2020-9759

  webOS TV Emulator privilege escalation vulnerability

  A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration …

  weechat weechat Debian Ubuntu
  Mar 23, 2020
• Unscored —
  CVE-2020-8955

  irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of s…

  weechat weechat weechat Debian Ubuntu Alpine
  Feb 12, 2020
• Unscored —
  CVE-2017-14727

  logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffe…

  weechat weechat weechat Debian Ubuntu Alpine
  Sep 23, 2017
• Unscored —
  CVE-2017-8073

  WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp…

  weechat weechat weechat Debian Ubuntu Alpine
  Apr 23, 2017
• Unscored —
  CVE-2012-5534

  The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitr…

  weechat Debian
  Dec 3, 2012
• Unscored —
  CVE-2012-5854

  Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash o…

  weechat Debian
  Nov 19, 2012
• Unscored —
  CVE-2011-1428

  Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname mat…

  weechat Debian
  Mar 16, 2011
• Unscored —
  CVE-2009-0661

  Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an I…

  weechat Debian
  Mar 19, 2009