CVE-2016-2233

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

34.89% chance of exploitation in the next 30 days, 98th percentile

Published

2017-01-18

Updated

2024-08-05

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/136563/Hexchat-IRC-Client-2.11.0-CAP-LS-Handling-Buf…
• fath0218/CVE-2016-22330★ · 2018-12-03

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39657

References

• CVE Record
• NVD entry

Related

• CVE-2016-2226
• CVE-2016-2242
• CVE-2016-2222
• CVE-2016-2278
• CVE-2016-2221
• CVE-2016-2279