CVE-2012-5854 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 90%

Affected Products (NVD)

Vendor	Product	Version
flashtux	weechat	0.3.6
flashtux	weechat	0.3.7
flashtux	weechat	0.3.8
flashtux	weechat	0.3.9

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

weechat

bookworm	3.8-1 fixed
bullseye	3.0-1+deb11u1 fixed
sid	4.4.2-1 fixed
squeeze	not-affected
trixie	4.4.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

weechat

hardy	ignored
lucid	ignored
oneiric	ignored
precise	ignored
quantal	ignored
raring	not-affected
saucy	not-affected
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092228.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092490.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092536.html

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html

http://lists.opensuse.org/opensuse-updates/2012-11/msg00087.html

http://osvdb.org/87279

http://secunia.com/advisories/51377

http://weechat.org/security/

http://www.mandriva.com/security/advisories?name=MDVSA-2013:136

http://www.openwall.com/lists/oss-security/2012/11/12/2

http://www.securityfocus.com/bid/56482

https://savannah.nongnu.org/bugs/?37704

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0330

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092228.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092490.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092536.html

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html

http://lists.opensuse.org/opensuse-updates/2012-11/msg00087.html

http://osvdb.org/87279

http://secunia.com/advisories/51377

http://weechat.org/security/

http://www.mandriva.com/security/advisories?name=MDVSA-2013:136

http://www.openwall.com/lists/oss-security/2012/11/12/2

http://www.securityfocus.com/bid/56482

https://savannah.nongnu.org/bugs/?37704

https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0330