992 matches found
CVE-2017-7191
The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via unspecified vectors...
PT-2017-17567 · Irssi +1 · Irssi +1
Name of the Vulnerable Software and Affected Versions: Irssi versions 1.x before 1.0.2 Description: The issue in Irssi's netjoin processing allows attackers to cause a denial of service and possibly execute arbitrary code. Recommendations: For Irssi versions 1.x before 1.0.2, update to version...
[ASA-201703-17] irssi: arbitrary code execution
Arch Linux Security Advisory ASA-201703-17 ========================================== Severity: High Date : 2017-03-21 CVE-ID : CVE-2017-7191 Package : irssi Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-224 Summary ======= The package irssi before version...
FreeBSD : irssi -- use-after-free potential code execution (06f931c0-0be0-11e7-b4bf-5404a68ad561)
The irssi project reports : Use after free while producing list of netjoins CWE-416. This issue was found and reported to us by APic. This issue usually leads to segmentation faults. Targeted code execution should be difficult. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
openSUSE Security Update : irssi (openSUSE-2017-352)
This update to irssi 1.0.2 fixes security issues and bugs. The following vulnerabilities were fixed : boo1029020: Use after free while producing list of netjoins The following non-security changes are included : - Fix in command arg parser to detect missing arguments in tail place - Fix regressio...
OPENSUSE-SU-2017:0737-1 Security update for irssi
This update to irssi 1.0.2 fixes security issues and bugs. The following vulnerabilities were fixed: boo1029020: Use after free while producing list of netjoins The following non-security changes are included: - Fix in command arg parser to detect missing arguments in tail place - Fix regression...
OPENSUSE-SU-2017:0739-1 Security update for irssi
This update to irssi 1.0.2 fixes security issues and bugs. The following vulnerabilities were fixed: boo1029020: Use after free while producing list of netjoins The following non-security changes are included: - Fix in command arg parser to detect missing arguments in tail place - Fix regression...
Irssi Denial of Service Vulnerability (CNVD-2017-03763)
Irssi is a text-based IRC client program written in C by Timo Sirainen. A denial of service vulnerability exists in Irssi. An attacker could exploit this vulnerability to cause a denial of service...
irssi -- use-after-free potential code execution
The irssi project reports: Use after free while producing list of netjoins CWE-416. This issue was found and reported to us by APic. This issue usually leads to segmentation faults. Targeted code execution should be difficult...
Out-of-bounds
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...
CVE-2017-5356
Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...
DEBIAN-CVE-2017-5196
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...
CVE-2017-5196
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...
DEBIAN-CVE-2017-5193
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a message without a nick...
ALPINE-CVE-2017-5196
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...
CVE-2017-5356
Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...
DEBIAN-CVE-2017-5194
Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service crash via an invalid nick message...
Out-of-bounds
Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...