Vulnerabilities

TI-2016-02036 CVE-2016-2233 · GHSA-xgr5-8gm5-gj39

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat…

MEDIUM 58

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.34102 Published 2017-01-18 No fix listed CWE-119

TI-2016-01916 CVE-2016-2087 · GHSA-r36g-f4rx-gr5p

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC…

MEDIUM 44

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a ..

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.09489 Published 2017-01-18 No fix listed CWE-22

TI-2013-06101 CVE-2013-7449 · GHSA-vcmj-h4g7-8fpr

The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and…

LOW 30

The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle atta…

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00757 Published 2016-04-21 Will not fix CWE-310

Vulnerabilities

Filters

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat…

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC…

The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and…