Subject: [ASA-201709-20] weechat: denial of service Arch Linux Security Advisory ASA-201709-20 ========================================== Severity: Medium Date : 2017-09-25 CVE-ID : CVE-2017-14727 Package : weechat Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-412 Summary ======= The package weechat before version 1.9.1-1 is vulnerable to denial of service. Resolution ========== Upgrade to 1.9.1-1. # pacman -Syu "weechat>=1.9.1-1" The problem has been fixed upstream in version 1.9.1. Workaround ========== Unload the logger plugin: /plugin unload logger Description =========== It has been discovered that in logger.c in the logger plugin before weechat 1.9.1 the date/time conversion specifiers are expanded after replacing buffer local variables in name of log files. In some cases, this can lead to an error in function strftime and a crash caused by the use of an uninitialized buffer. Impact ====== A remote attacker can crash the client via a specially crafted string. References ========== https://weechat.org/download/security/ https://github.com/weechat/weechat/commit/e4cc90f4b43153dc1c6516c1f1aad2504f... https://security.archlinux.org/CVE-2017-14727