kritisch
CVE-2024-46613
WeeChat before 4.4.2 has an integer overflow and resultant buffer over ...
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | weechat | kein Fix angegeben |
| debian 12 | weechat | kein Fix angegeben |
| debian 13 | weechat | 4.4.2-1 |
| debian 14 | weechat | 4.4.2-1 |
| echo | weechat | 4.4.2-1 |
| rapidfort alpine 3.20 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.22 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.23 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.24 | weechat | 4.4.2-r0 |
| rapidfort debian 12 | weechat | 0:4.4.2-1 |
| rapidfort debian 13 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 20.04 | weechat | 0:4.4.2-1 |
Alle 15 Einträge aus 15 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | weechat | kein Fix angegeben |
| debian 12 | weechat | kein Fix angegeben |
| debian 13 | weechat | 4.4.2-1 |
| debian 14 | weechat | 4.4.2-1 |
| echo | weechat | 4.4.2-1 |
| rapidfort alpine 3.20 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.22 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.23 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.24 | weechat | 4.4.2-r0 |
| rapidfort debian 12 | weechat | 0:4.4.2-1 |
| rapidfort debian 13 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 20.04 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 22.04 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 24.04 | weechat | 0:4.4.2-1 |
| ubuntu 18.04-ESM | weechat | kein Fix angegeben |
Referenzen
- https://github.com/weechat/weechat/commit/315f769ab25643cf501a4bf8deb8025d92654303
- https://github.com/weechat/weechat/commit/5564baf424d847144f13ee50f0988e4f3407e638
- https://github.com/weechat/weechat/commit/62d0347d4bdee63694354184611b0b6af5028ff2
- https://github.com/weechat/weechat/commit/970f20af31cbcce02a99368eb633e8c4082dfe64
- https://github.com/weechat/weechat/commit/9aa0a94156c7cc367d52c31e60d8b03239d4dbd4
- https://github.com/weechat/weechat/issues/2178
- https://weechat.org/doc/weechat/security/WSA-2024-1/
- https://www.cve.org/CVERecord?id=CVE-2024-46613