What is CVE-2017-14727?

CVE-2017-14727 is a high-severity vulnerability in Weechat Logger, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.5/10. Published 2017-09-23.

How severe is CVE-2017-14727?

High severity. CVSS v3 base score is 7.5 out of 10.

Buffer overflow in Weechat Logger

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized.

Vulnerability class: Buffer Overflow

Published 2017-09-23 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.028 (86.2th percentile), scored 2026-10-06.

Low probability of exploitation in the next 30 days, but still tracked. 86th percentile — 86.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.028 · newest: 0.028 · change: 0.000

Affected products

Weechat Logger
Weechat — versions 0.3.2, 0.3.3, 0.3.4

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

www.securityfocus.com/bid/101003 (VDB Entry, Third Party Advisory, vdb-entry)
weechat.org/download/security/ (Vendor Advisory)
github.com/weechat/weechat/commit/f105c6f0b56fb5687b2d2aedf37cb1d1b434d556 (Patch, Third Party Advisory)
weechat.org/news/98/20170923-Version-1.9.1-security-release/ (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2017-14727?: CVE-2017-14727 is a high-severity vulnerability in Weechat Logger, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.5/10. Published 2017-09-23.
How severe is CVE-2017-14727?: High severity. CVSS v3 base score is 7.5 out of 10.