CVE-2017-14727: Buffer Overflow
Published Sep 23, 2017
·Updated
logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.
Affected Software
28 affected components
WeeChat logger
WeeChat WeeChat=0.3.2
WeeChat WeeChat=0.3.3
WeeChat WeeChat=0.3.4
WeeChat WeeChat=0.3.5
WeeChat WeeChat=0.3.6
WeeChat WeeChat=0.3.7
WeeChat WeeChat=0.3.8
WeeChat WeeChat=0.3.9
WeeChat WeeChat=0.3.9.1
WeeChat WeeChat=0.3.9.2
WeeChat WeeChat=0.4.0
WeeChat WeeChat=0.4.1
WeeChat WeeChat=0.4.2
WeeChat WeeChat=0.4.3
WeeChat WeeChat=1.0.0
WeeChat WeeChat=1.0.1
WeeChat WeeChat=1.1.0
WeeChat WeeChat=1.1.1
WeeChat WeeChat=1.2.0
WeeChat WeeChat=1.3.0
WeeChat WeeChat=1.4.0
WeeChat WeeChat=1.5.0
WeeChat WeeChat=1.6.0
WeeChat WeeChat=1.7.0
WeeChat WeeChat=1.7.1
WeeChat WeeChat=1.8.0
WeeChat WeeChat=1.9.0
Remediation
Event History
Sep 23, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14727?
CVE-2017-14727 has a medium severity impact due to the potential for application crashes.
2
How do I fix CVE-2017-14727?
To fix CVE-2017-14727, update WeeChat to version 1.9.1 or later where the vulnerability has been addressed.
3
What versions are affected by CVE-2017-14727?
CVE-2017-14727 affects all versions of WeeChat prior to 1.9.1.
4
What causes the vulnerability in CVE-2017-14727?
CVE-2017-14727 is caused by uninitialized buffers in the logger plugin's handling of strftime date/time specifiers.
5
Is there a workaround for CVE-2017-14727?
There is no known effective workaround for CVE-2017-14727 other than updating to the fixed version.