CVE-2017-8073: Debian Linux

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

Affected products

• Debian Debian Linux: version 8.0 only
• Weechat Weechat: before 1.7.1 (fixed in 1.7.1)

Published 2017-04-23. Last modified 2026-06-17.