CVE-2017-15923

CVE-2017-15923 affects Konversation (IRC client) up to version 1.7.x prior to fixes in 1.7.4. The root cause is a crash caused by parsing IRC color formatting codes, leading to a denial of service (crash). Public fixes exist: openSUSE/openSUSE-2017-1306 notes CVE-2017-15923 fixed in 1.7.4; Fedora...

CVE-2017-15923

Konversation 1.4.x, 1.5.x, 1.6.x, and 1.7.x before 1.7.3 allow remote attackers to cause a denial of service crash via vectors related to parsing of IRC color formatting codes...

Konversation Denial of Service Vulnerability

Konversation is an Internet Relay Chat client built on the KDE platform. A denial of service vulnerability exists in Konversation. A remote attacker could exploit this vulnerability to cause a denial of service crash...

Debian DSA-4033-1 : konversation - security update

Joseph Bisch discovered that Konversation, an user friendly Internet Relay Chat IRC client for KDE, could crash when parsing certain IRC color formatting codes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 4033-1] konversation security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4033-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4033-1] konversation security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4033-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 13, 2017 https://www.debian.org/security/faq -...

FreeBSD : konversation -- crash in IRC message parsing (795ccee1-c7ed-11e7-ad7d-001e2a3f778d)

KDE reports : Konversation has support for colors in IRC messages. Any malicious user connected to the same IRC network can send a carefully crafted message that will crash the Konversation user client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

[ASA-201711-19] konversation: denial of service

Arch Linux Security Advisory ASA-201711-19 ========================================== Severity: Medium Date : 2017-11-12 CVE-ID : CVE-2017-15923 Package : konversation Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-489 Summary ======= The package konversation befo...

Debian: Security Advisory (DSA-4033-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4016-1 : irssi - security update

Multiple vulnerabilities have been discovered in Irssi, a terminal based IRC client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2017-10965 Brian 'geeknik' Carpenter of Geeknik Labs discovered that Irssi does not properly handle receiving messages wi...

[SECURITY] [DSA 4016-1] irssi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4016-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] Fedora 26 Update: seamonkey-2.49.1-1.fc26

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Debian: Security Advisory (DSA-4016-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exitmap - A Fast and Modular Scanner for TOR Exit Relays

Exitmap is a fast and modular Python-based scanner for Tor exit relays. Exitmap modules implement tasks that are run over a subset of all exit relays. If you have a background in functional programming, think of exitmap as a map interface for Tor exit relays: Modules can perform any TCP-based...

konversation -- crash in IRC message parsing

KDE reports: Konversation has support for colors in IRC messages. Any malicious user connected to the same IRC network can send a carefully crafted message that will crash the Konversation user client...

USN-3465-1: Irssi vulnerabilities

Brian Carpenter discovered that Irssi incorrectly handled messages with invalid time stamps. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. CVE-2017-10965 Brian Carpenter discovered that Irssi incorrectly handled the internal nick list. A...

New FakeNet-NG Feature: Content-Based Protocol Detection

I Matthew Haigh recently contributed to FLARE’s FakeNet-NG network simulator by adding content-based protocol detection and configuration. This feature is useful for analyzing malware that uses a protocol over a non-standard port; for example, HTTP over port 81. The new feature also detects and...

[SECURITY] Fedora 25 Update: weechat-1.9.1-1.fc25

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

[SECURITY] Fedora 27 Update: weechat-1.9.1-1.fc27

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

Dradis Framework - Collaboration and reporting for IT Security teams

Dradis is an open-source collaboration framework, tailored to InfoSec teams. Goals Share the information effectively. Easy to use, easy to be adopted. Otherwise it would present little benefit over other systems. Flexible: with a powerful and simple extensions interface. Small and portable. You...