CyberRota Analysis
AI-GeneratedThe vulnerability exists in the WeeChat relay module's WebSocket permessage-deflate decompression function, allowing authenticated users to send a small compressed frame that decompresses to an unbounded size, potentially exhausting server memory and crashing the WeeChat process. This issue affects versions 4.3.0 through 4.9.0, and it is crucial for organizations using these versions to prioritize upgrading to version 4.9.1 to mitigate the risk of denial-of-service attacks. Users of the affected versions should take immediate action to secure their deployments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.