CVE catalog
CVE-2016-2233
hexchat: CVE-2016-2233
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 34.10% · Oct 25, 2026
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | hexchat | sid | 2.16.2-1 | fixed |
| Debian | hexchat | trixie | 2.16.2-1 | fixed |
| Debian | hexchat | bookworm | 2.16.1-1 | fixed |
| Ubuntu | xchat-gnome | 16.04 | 1:0.30.0~git20141005.816798-0ubuntu6 | vulnerable |
| Ubuntu | xchat-gnome | 16.04 | 1:0.30.0~git20141005.816798-0ubuntu7 | vulnerable |
| Ubuntu | xchat-gnome | 16.04 | 1:0.30.0~git20141005.816798-0ubuntu8 | vulnerable |
| Ubuntu | xchat-gnome | 16.04 | 1:0.30.0~git20141005.816798-0ubuntu9 | vulnerable |
| Ubuntu | hexchat | 16.04 | 2.10.2-1ubuntu2 | vulnerable |
| Ubuntu | hexchat | 16.04 | 2.10.2-1ubuntu3 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | hexchat | source | sid | 2.12.0-1 | low | Not reported | Not reported |
| Debian | hexchat | source | trixie | 2.12.0-1 | low | Not reported | Not reported |
| Debian | hexchat | source | bookworm | 2.12.0-1 | low | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [hexchat]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-common]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1· all · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1· all · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-dev]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-lua]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-perl]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-plugins]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
- [hexchat-python3]Fixed
Source package: [hexchat]
Details (2)
2.16.1-1+b3· amd64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
2.16.1-1+b3· arm64 · bookwormFixed · Fixed:
2.12.0-1dsa · hexchat · debian · bookworm; dsa · hexchat · debian · 12
[Debian 13 (Trixie)]
- [hexchat]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-common]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1· all · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1· all · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-dev]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-lua]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-perl]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-plugins]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
- [hexchat-python3]Fixed
Source package: [hexchat]
Details (2)
2.16.2-1+b6· amd64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
2.16.2-1+b6· arm64 · trixieFixed · Fixed:
2.12.0-1dsa · hexchat · debian · 13
Observed: