Hexchat Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Hexchat Project records in CISA KEV

No Hexchat Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hexchat 3 records MEDIUM

Records

3 records

TI-2016-02036 CVE-2016-2233 · GHSA-xgr5-8gm5-gj39

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat…

MEDIUM 58

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.34102 Published 2017-01-18 No fix listed CWE-119

TI-2016-01916 CVE-2016-2087 · GHSA-r36g-f4rx-gr5p

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC…

MEDIUM 44

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a ..

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.09489 Published 2017-01-18 No fix listed CWE-22

TI-2013-06101 CVE-2013-7449 · GHSA-vcmj-h4g7-8fpr

The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and…

LOW 30

The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle atta…

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00757 Published 2016-04-21 Will not fix CWE-310

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0