CVE-2016-2233 Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP L...
HighCVSS 7.5
EPSS 34.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/hexchat(Debian:12) | < 2.12.0-1 | 2.12.0-1 |
| debian/hexchat(Debian:13) | < 2.12.0-1 | 2.12.0-1 |
| hexchat project hexchat | = 2.10.2 | No fix listed |
References
- Debian Security Tracker CVE-2016-2233 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 95920 vdb-entry
- 39657 exploit third-party-advisory vdb-entry