Design/Logic Flaw

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191...

EulerOS 2.0 SP2 : irssi (EulerOS-SA-2017-1113)

According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via...

CVE-2017-7191

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via unspecified vectors...

CVE-2017-7191

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via unspecified vectors...

CVE-2017-7191

The vulnerability CVE-2017-7191 affects Irssi 1.x before 1.0.2, where the netjoin processing can be abused to cause a denial of service via use‑after‑free and potentially allow arbitrary code execution. Affected component: Irssi netjoin handling in 1.x series prior to 1.0.2. Root cause: use-after...

CVE-2017-7191

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service use-after-free and possibly execute arbitrary code via unspecified vectors...

[ASA-201703-17] irssi: arbitrary code execution

Arch Linux Security Advisory ASA-201703-17 ========================================== Severity: High Date : 2017-03-21 CVE-ID : CVE-2017-7191 Package : irssi Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-224 Summary ======= The package irssi before version...

FreeBSD : irssi -- use-after-free potential code execution (06f931c0-0be0-11e7-b4bf-5404a68ad561)

The irssi project reports : Use after free while producing list of netjoins CWE-416. This issue was found and reported to us by APic. This issue usually leads to segmentation faults. Targeted code execution should be difficult. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...