CVE-2017-5196

CVE-2017-5196 (Irssi) is an out-of-bounds read vulnerability reported in Irssi before 0.8.21, specifically in incomplete character sequences, which can cause a crash (DoS). Public advisories confirm this CVE as part of multiple issues fixed in version 0.8.21. The affected product is the Irssi IRC...

CVE-2017-5194

Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service crash via an invalid nick message...

CVE-2017-5193

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a message without a nick...

CVE-2017-5356

Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...

CVE-2017-5193

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a message without a nick...

CVE-2017-5195

Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted ANSI x8 color code...

CVE-2017-5193

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a message without a nick...

CVE-2017-5196

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...

CVE-2017-5194

CVE-2017-5194 is a use-after-free vulnerability in Irssi before 0.8.21 triggered by an invalid nick message, allowing remote attackers to crash the application (denial of service). Multiple connected advisories confirm the flaw, its remote exploitability, and that the fix is to upgrade to Irssi 0...

CVE-2017-5193

CVE-2017-5193 targets Irssi. The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service via a message lacking a nick, via a NULL pointer dereference that crashes the application. Affected versions are

CVE-2017-5196

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...

CVE-2017-5356

Irssi before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a string containing a formatting sequence % without a closing bracket...

CVE-2017-5195

Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted ANSI x8 color code...

CVE-2017-5196

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service out-of-bounds read and crash via vectors involving strings that are not UTF8...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

DEBIAN-CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

Design/Logic Flaw

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

CVE-2016-7553

CVE-2016-7553 affects Irssi prior to 0.8.20 via the buf.pl script (before version 2.20) that creates a scrollbuffer dump file with weak permissions. This could allow local users to read private chat conversations by accessing the dump file created during upgrades. The available connected document...