CVE-2016-2233 describes a stack-based buffer overflow in HexChat 2.10.2, specifically within the inbound_cap_ls function, affecting the hexchat_project. This vulnerability allows remote IRC servers to trigger a denial of service by sending a CAP LS message with an excessive number of options. With a CVSS score of 7.5 (High), it presents a network-exploitable threat with low attack complexity, leading to a complete loss of availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no indication of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.10.2CPE matchmatch criteria | cpe:2.3:a:hexchat_project:hexchat:2.10.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.