CVE-2016-2233

High

Published: 18/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) by sending a large number of options in a CAP LS message.

Risk Assessment

This vulnerability can lead to denial of service, affecting the application's availability for users. An attacker could exploit this flaw to disrupt HexChat's operation.

Recommendation

It is recommended to update HexChat to the latest version to mitigate this vulnerability. Additionally, monitoring IRC traffic for potential attack attempts is advised.

Other vulnerabilities in HexChat 2.10.2

CVE-2016-2087High
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.

Original NVD description (English source)

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.