Design/Logic Flaw

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 are affected by a use-after-free caused by a stale special-collector reference, triggered when printing a non-formatted line concurrently with a formatted line. The issue has been fixed in Irssi 1.4.4 (as reflected in Mageia/OpenVAS advisories and OSV entries), ...

CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

Irssi 资源管理错误漏洞

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A security vulnerability exists in Irssi versions prior to Irssi 1.4.2-1ubuntu1.1 that stems from lrssi incorrectly handling certain internal routines, which could be exploited by an attacker to cause a system...

Ubuntu: Security Advisory (USN-6002-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6002-1: Irssi vulnerability

It was discovered that Irssi incorrectly handled certain internal routines. An attacker could possibly use this issue to cause a crash...

Ubuntu 22.10 : Irssi vulnerability (USN-6002-1)

The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6002-1 advisory. It was discovered that Irssi incorrectly handled certain internal routines. An attacker could possibly use this issue to cause a crash. Tenable has extracted the...

SUSE CVE-2023-29132

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line...

CVE-2023-29132

A flaw was found in the Irssi package. When Irssi prints a message while another message is being printed, the list that keeps track of Irssi variables for use in statusbar/message patterns is incorrectly cleaned up, leading to a use-after-free condition...

Slackware: Security Advisory (SSA:2023-092-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 14.2 / 15.0 / current irssi Vulnerability (SSA:2023-092-01)

The version of irssi installed on the remote host is prior to 1.4.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-092-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

[slackware-security] irssi

New irssi packages are available for Slackware 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/irssi-1.4.4-i586-1slack15.0.txz: Upgraded. Do not crash Irssi when one line is printed as the result of another line being...

Debian: Security Advisory (DLA-1217-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2006-0458

The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distributions, allows remote attackers to cause a denial of service application crash via certain crafted arguments in a DCC command...

SUSE CVE-2009-1959

Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...

SUSE CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...