CVE-2020-9760: debian debian_linux Classic Buffer Overflow
CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2020-9760DEBIAN-CVE-2020-9760
Published 23-03-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-9760 is a critical (CVSS 9.8) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 2.10% chance of exploitation in the next 30 days, higher than 81.5% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
2.10%
0%100%
Low · -0.15 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 1Timeline
- 23-03-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.
CVSS metrics
4 scores · 3 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.10%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
-0.15 pp
From 2.25% on 21-09-2026
21-09-202621-10-2026
EPSS score2.10%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- weechat< 2.7.1-1
- debian_linuxEOL8.0 | 9.0
Ubuntu1 product
- weechat< 1.4-2ubuntu0.1+esm1 | < 1.9.1-1ubuntu1+esm1
Weechat1 product
- weechat≥ 0.3.4, < 2.7.1
3 vendors · 4 products
References
9 links- github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197fX Refsource MISCPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2020/03/msg00031.htmlMailing ListX Refsource MLISTREPORTThird Party Advisory- lists.debian.org/debian-lts-announce/2021/09/msg00018.htmlMailing ListX Refsource MLISTThird Party Advisory