Out-of-bounds read in WeeChat - CVE-2021-40516

Vulnerability identifier: #VU56368

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-40516

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in plugins/relay/relay-websocket.c in the Relay plugin. A remote attacker can trigger out-of-bounds read error and cause a denial of service condition on the system.

WeeChat
Ubuntu
weechat (Ubuntu package)
weechat-core (Ubuntu package)
weechat-curses (Ubuntu package)
weechat-plugins (Ubuntu package)
weechat-php (Ubuntu package)
weechat-headless (Ubuntu package)
weechat-tcl (Ubuntu package)
weechat-guile (Ubuntu package)
weechat-ruby (Ubuntu package)
weechat-lua (Ubuntu package)
weechat-python (Ubuntu package)
weechat-perl (Ubuntu package)

Install updates from vendor's website.

WeeChat - update to 3.2.1
weechat (Ubuntu package) - addressed in versions 1.4-2ubuntu0.1+esm1, 1.9.1-1ubuntu1+esm1, 2.8-1ubuntu0.1~esm1
weechat-core (Ubuntu package) - addressed in versions 1.4-2ubuntu0.1+esm1, 1.9.1-1ubuntu1+esm1, 2.8-1ubuntu0.1~esm1
weechat-curses (Ubuntu package) - addressed in versions 1.4-2ubuntu0.1+esm1, 1.9.1-1ubuntu1+esm1
weechat-plugins (Ubuntu package) - addressed in versions 1.4-2ubuntu0.1+esm1, 1.9.1-1ubuntu1+esm1, 2.8-1ubuntu0.1~esm1
weechat-php (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-headless (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-tcl (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-guile (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-ruby (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-lua (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-python (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1
weechat-perl (Ubuntu package) - update to 2.8-1ubuntu0.1~esm1

• https://weechat.org/doc/security/
• https://github.com/weechat/weechat/commit/8b1331f98de1714bae15a9ca2e2b393ba49d735b

• Denial of service in WeeChat
• Ubuntu update for weechat