CVE-2021-40516: High severity WeeChat WeeChat vulnerability
Published Sep 5, 2021
·Updated
WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
Affected Software
2 affected components
WeeChat WeeChat>=0.4.1<3.2.1
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Sep 5, 2021
CVE Published
via MITRE·05:14 PM
Data Sourced
via MITRE·05:14 PM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-40516?
CVE-2021-40516 has a severity rating that indicates a denial of service vulnerability.
2
How do I fix CVE-2021-40516?
To fix CVE-2021-40516, upgrade to WeeChat version 3.2.1 or later.
3
What causes CVE-2021-40516?
CVE-2021-40516 is caused by a crafted WebSocket frame that leads to an out-of-bounds read.
4
Which versions of WeeChat are affected by CVE-2021-40516?
WeeChat versions prior to 3.2.1 are affected by CVE-2021-40516.
5
Can CVE-2021-40516 be exploited remotely?
Yes, CVE-2021-40516 can be exploited remotely by attackers targeting the Relay plugin.