CVE-2020-9760: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Weechat Weechat: from 0.3.4, before 2.7.1 (fixed in 2.7.1)

Published 2020-03-23. Last modified 2026-06-17.