kritik
CVE-2024-46613
WeeChat before 4.4.2 has an integer overflow and resultant buffer over ...
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | weechat | düzeltme belirtilmemiş |
| debian 12 | weechat | düzeltme belirtilmemiş |
| debian 13 | weechat | 4.4.2-1 |
| debian 14 | weechat | 4.4.2-1 |
| echo | weechat | 4.4.2-1 |
| rapidfort alpine 3.20 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.22 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.23 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.24 | weechat | 4.4.2-r0 |
| rapidfort debian 12 | weechat | 0:4.4.2-1 |
| rapidfort debian 13 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 20.04 | weechat | 0:4.4.2-1 |
15 kaynaktaki 15 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | weechat | düzeltme belirtilmemiş |
| debian 12 | weechat | düzeltme belirtilmemiş |
| debian 13 | weechat | 4.4.2-1 |
| debian 14 | weechat | 4.4.2-1 |
| echo | weechat | 4.4.2-1 |
| rapidfort alpine 3.20 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.22 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.23 | weechat | 4.4.2-r0 |
| rapidfort alpine 3.24 | weechat | 4.4.2-r0 |
| rapidfort debian 12 | weechat | 0:4.4.2-1 |
| rapidfort debian 13 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 20.04 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 22.04 | weechat | 0:4.4.2-1 |
| rapidfort ubuntu 24.04 | weechat | 0:4.4.2-1 |
| ubuntu 18.04-ESM | weechat | düzeltme belirtilmemiş |
Referanslar
- https://github.com/weechat/weechat/commit/315f769ab25643cf501a4bf8deb8025d92654303
- https://github.com/weechat/weechat/commit/5564baf424d847144f13ee50f0988e4f3407e638
- https://github.com/weechat/weechat/commit/62d0347d4bdee63694354184611b0b6af5028ff2
- https://github.com/weechat/weechat/commit/970f20af31cbcce02a99368eb633e8c4082dfe64
- https://github.com/weechat/weechat/commit/9aa0a94156c7cc367d52c31e60d8b03239d4dbd4
- https://github.com/weechat/weechat/issues/2178
- https://weechat.org/doc/weechat/security/WSA-2024-1/
- https://www.cve.org/CVERecord?id=CVE-2024-46613