debian/xchat vulnerabilities

Latest debian/xchat CVEs

Newest publication first

1. DLA-1050-1 xchat - security update

   Published 2017-08-10

   Unknown

2. CVE-2011-5129 Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.

   Published 2012-08-30

   Medium·CVSS 5.0 EPSS 7.7%

   Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.

3. CVE-2009-0315 Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerabili...

   Published 2009-01-28

   Medium·CVSS 6.9 EPSS 0.37%

   Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

4. DSA-493 xchat - buffer overflow

   Published 2004-04-21

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.