Skip to content
OpenAdvisories

Package · Ubuntu

weechat

10 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

    WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext pas…