992 matches found
CVE-2016-7044
The unformat24bitcolor function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service heap corruption and crash via an incomplete 24bit color code...
CVE-2016-7044
The CVE-2016-7044 issue affects Irssi prior to 0.8.20 where the unformat_24bit_color function in the format parsing code, when compiled with true-color enabled, can be triggered by an incomplete 24bit color code to cause heap corruption and a remote denial of service. The public material ties thi...
CVE-2016-7045
The formatsendtogui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service heap corruption and crash via vectors involving the length of a string...
CVE-2016-7045
The formatsendtogui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service heap corruption and crash via vectors involving the length of a string...
UBUNTU-CVE-2016-7553
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...
CVE-2016-7553
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...
Irssi 'buf.pl' Local Information Disclosure Vulnerability
Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...
Irssi Heap Buffer Overflow Vulnerability
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A security vulnerability exists in versions 0.8.17-beta through 0.8.19-219-g52fedea of Irssi that can be exploited by an attacker to cause a denial of service...
CVE-2016-7553
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...
Irssi Denial of Service Vulnerability
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A denial of service vulnerability exists in Irssi versions 0.8.17-beta through 0.8.19-219-g52fedea, which stems from the 'unformat24bitcolor' function failing to validate the length of a string. An attacker could...
CVE-2016-7044
The unformat24bitcolor function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service heap corruption and crash via an incomplete 24bit color code...
CVE-2016-7045
The formatsendtogui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service heap corruption and crash via vectors involving the length of a string...
FreeBSD : irssi -- heap corruption and missing boundary checks (e78261e4-803d-11e6-a590-14dae9d210b8)
Irssi reports : Remote crash and heap corruption. Remote code execution seems difficult since only Nuls are written. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018...
[ASA-201609-20] irssi: arbitrary code execution
Arch Linux Security Advisory ASA-201609-20 ========================================== Severity: High Date : 2016-09-22 CVE-ID : CVE-2016-7045 Package : irssi Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary ======= The package irssi before versi...
Ubuntu: Security Advisory (USN-3086-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : irssi (SSA:2016-265-03)
New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-265-03. The tex...
Ubuntu 16.04 LTS : Irssi vulnerabilities (USN-3086-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3086-1 advisory. Gabriel Campana and Adrien Guinet discovered that the format parsing code in Irssi did not properly verify 24bit color codes. A remote attacker could use...
Debian DSA-3672-1 : irssi - security update
Gabriel Campana and Adrien Guinet from Quarkslab discovered two remotely exploitable crash and heap corruption vulnerabilities in the format parsing code in Irssi, a terminal based IRC client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
[slackware-security] irssi
New irssi packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/irssi-0.8.20-i586-1slack14.2.txz: Upgraded. This update fixes two remote crash and heap corruption...
[SECURITY] [DSA 3672-1] irssi security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3672-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 21, 2016 https://www.debian.org/security/faq -...