{"id":"CVE-2020-9759","aliases":["DEBIAN-CVE-2020-9759","DLA-2157-1","DLA-2770-1","EUVD-2020-30538","GHSA-j24f-gw9v-x4vp","MGASA-2020-0153","UBUNTU-CVE-2020-9759","USN-5258-1"],"status":"published","title":"webOS TV Emulator privilege escalation vulnerability","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00472,"percentile":0.41148,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476","CWE-494"],"published":"2020-03-23T15:36:51Z","modified":"2026-10-26T12:02:30Z","fixes":[{"ecosystem":"Debian:12","package":"weechat","fixed_in":["2.7.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"weechat","fixed_in":["2.7.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"weechat","fixed_in":["2.7.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"weechat","fixed_in":["1.4-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"weechat","fixed_in":["1.9.1-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-1+deb8u3"}]}],"versions":["1.0.1-1","1.0.1-1+deb8u1","1.0.1-1+deb8u1~bpo70+1","1.0.1-1+deb8u2"],"bundled":3},{"source":"osv","ecosystem":"Debian:9","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6-1+deb9u3"}]}],"versions":["1.6-1+deb9u1","1.6-1+deb9u2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:7","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2ubuntu0.1+esm1"}]}],"versions":["1.3-1","1.3-1build1","1.4-1","1.4-1build1","1.4-1build2","1.4-2","1.4-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1ubuntu1+esm1"}]}],"versions":["1.9.1-1","1.9.1-1build1","1.9.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4-2ubuntu0.1+esm1"}]}],"versions":["1.3-1","1.3-1build1","1.4-1","1.4-1build1","1.4-1build2","1.4-2","1.4-2ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1ubuntu1+esm1"}]}],"versions":["1.9.1-1","1.9.1-1build1","1.9.1-1ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"weechat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-1ubuntu0.1~esm1"}]}],"versions":["2.6-2","2.6-2build1","2.6-2build2","2.6-2ubuntu1","2.6-2ubuntu2","2.8-1"],"bundled":5}],"products":[{"vendor":"lg","product":"webos"}],"references":[{"url":"https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","advisory","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Not Applicable","Third Party Advisory","advisory","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9759"},{"url":"https://github.com/weechat/weechat/commit/9904cb6d2eb40f679d8ff6557c22d53a3e3dc75a"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html","tags":["report"]},{"url":"https://security.gentoo.org/glsa/202003-51","tags":["report"]},{"url":"https://weechat.org/doc/security"},{"url":"https://github.com/advisories/GHSA-j24f-gw9v-x4vp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-9759","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0153.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26400","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2157","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-9759","tags":["report"]},{"url":"https://weechat.org/doc/security/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5258-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-14727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-40516","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-9759","title":"webOS TV Emulator privilege escalation vulnerability","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T15:36:51.058Z","modified":"2024-09-17T03:39:08.185Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:49.538427Z"}],"euvd":[{"id":"EUVD-2020-30538","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T15:36:51Z","modified":"2024-09-17T03:39:08Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:29.877686Z"}],"ghsa":[{"id":"GHSA-j24f-gw9v-x4vp","title":"An issue was discovered in WeeChat before 2.7.1 (0.4.0 to 2.7 are affected). A malformed message...","description":"An issue was discovered in WeeChat before 2.7.1 (0.4.0 to 2.7 are affected). A malformed message 352 (who) can cause a NULL pointer dereference in the callback function, resulting in a crash.","status":"published","published":"2022-05-24T17:12:18Z","modified":"2024-04-04T02:49:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-476","CWE-494"],"updated_at":"2026-11-02T14:56:12.154453Z"}],"nvd":[{"id":"CVE-2020-9759","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T16:15:17.86Z","modified":"2026-06-17T03:28:31.747Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-494"],"updated_at":"2026-11-02T14:05:56.580228Z"}],"osv":[{"id":"CVE-2020-9759","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T16:15:17Z","modified":"2026-04-16T04:43:10.761303102Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-9759","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T16:15:17.86Z","modified":"2026-10-26T12:02:30.624279993Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"UBUNTU-CVE-2020-9759","description":"A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.","status":"published","published":"2020-03-23T16:15:00Z","modified":"2026-04-22T12:45:11.65038Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"DLA-2157-1","title":"weechat - security update","status":"published","published":"2020-03-24T00:00:00Z","modified":"2026-03-09T01:22:57.870723Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2770-1","title":"weechat - security update","status":"published","published":"2021-09-30T00:00:00Z","modified":"2026-03-09T01:23:00.127647Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2020-0153","title":"Updated weechat packages fix security vulnerabilities","description":"Updated weechat packages fix security vulnerabilities:\n\nAn issue was discovered in WeeChat before 2.7.1 (0.4.0 to 2.7 are\naffected). A malformed message 352 (who) can cause a NULL pointer\ndereference in the callback function, resulting in a crash\n(CVE-2020-9759).\n\nAn issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are\naffected). When a new IRC message 005 is received with longer nick\nprefixes, a buffer overflow and possibly a crash can happen when a \nnew mode is set for a nick (CVE-2020-9760).\n","status":"published","published":"2020-04-02T22:48:49Z","modified":"2026-04-16T04:41:26.976212319Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"USN-5258-1","title":"weechat vulnerabilities","description":"Stuart Nevans Locke discovered that WeeChat's relay plugin insecurely handled\nmalformed websocket frames. A remote attacker in control of a server\ncould possibly use this issue to cause denial of service in a client.\n(CVE-2021-40516)\n\nStuart Nevans Locke discovered that WeeChat insecurely handled certain\nIRC messages. A remote attacker in control of a server could possibly use\nthis issue to cause denial of service in a client. This issue only affected\nUbuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2020-9760)\n\nStuart Nevans Locke discovered that WeeChat insecurely handled certain\nIRC messages. A remote unauthenticated attacker could possibly use these\nissues to cause denial of service in a client. These issues only affected\nUbuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2020-9759, CVE-2020-8955)\n\nJoseph Bisch discovered that WeeChat's logger incorrectly handled certain\nmemory operations when handling log file names. A remote attacker could possibly\nuse this issue to cause denial of service in a client. This issue only\naffected Ubuntu 16.04 ESM. (CVE-2017-14727)\n","status":"published","published":"2022-02-04T16:38:24Z","modified":"2026-06-25T13:31:00.16572369Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}