{"id": "SSA-2018-046-01", "type": "slackware", "bulletinFamily": "unix", "title": "[slackware-security] irssi", "description": "New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current\nto fix security issues.\n\n\nHere are the details from the Slackware 14.2 ChangeLog:\n\npatches/packages/irssi-1.0.7-i586-1_slack14.2.txz: Upgraded.\n This update fixes bugs and security issues.\n For more information, see:\n https://irssi.org/security/html/irssi_sa_2018_02\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7054\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7053\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7050\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7052\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7051\n (* Security fix *)\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/irssi-1.0.7-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/irssi-1.0.7-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/irssi-1.0.7-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/irssi-1.0.7-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/irssi-1.0.7-i586-1_slack14.2.txz\n\nUpdated package for Slackware x86_64 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/irssi-1.0.7-x86_64-1_slack14.2.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/irssi-1.1.1-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/irssi-1.1.1-x86_64-1.txz\n\n\nMD5 signatures:\n\nSlackware 14.0 package:\nce82a4f6d8aaf4632806db2893ddb0dc irssi-1.0.7-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\n7d2662e155e742960bec814286e9f58b irssi-1.0.7-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\n0645709121b1a3eefdc3095e391cdb61 irssi-1.0.7-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n92777560bb95c264bf7e79159bd5df47 irssi-1.0.7-x86_64-1_slack14.1.txz\n\nSlackware 14.2 package:\n7ddcebf68d020dd1ca71306724746bea irssi-1.0.7-i586-1_slack14.2.txz\n\nSlackware x86_64 14.2 package:\ndc60362b6999b0ef91b1f5e1517f1973 irssi-1.0.7-x86_64-1_slack14.2.txz\n\nSlackware -current package:\nbca5b4b7d5388d8dead5f262f3ee641d n/irssi-1.1.1-i586-1.txz\n\nSlackware x86_64 -current package:\n453cf7794998cb384de19f638cd741f2 n/irssi-1.1.1-x86_64-1.txz\n\n\nInstallation instructions:\n\nUpgrade the package as root:\n > upgradepkg irssi-1.0.7-i586-1_slack14.2.txz", "published": "2018-02-16T05:02:01", "modified": "2018-02-16T05:02:01", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.437110", "reporter": "Slackware Linux Project", "references": [], "cvelist": ["CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7052", "CVE-2018-7053", "CVE-2018-7054"], "lastseen": "2020-10-25T16:36:29", "viewCount": 22, "enchantments": {"dependencies": {"references": [{"type": "freebsd", "idList": ["7AFC5E56-156D-11E8-95F2-005056925DB4"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310843714", "OPENVAS:1361412562311220181061", "OPENVAS:1361412562310891289", "OPENVAS:1361412562310891318", "OPENVAS:1361412562310844079", "OPENVAS:1361412562310874152", "OPENVAS:1361412562310874148", "OPENVAS:1361412562310704162", "OPENVAS:1361412562311220181060"]}, {"type": "nessus", "idList": ["SLACKWARE_SSA_2019-011-01.NASL", "EULEROS_SA-2018-1060.NASL", "FEDORA_2018-433D2DC3C7.NASL", "UBUNTU_USN-3590-1.NASL", "DEBIAN_DLA-1289.NASL", "EULEROS_SA-2018-1061.NASL", "SLACKWARE_SSA_2018-046-01.NASL", "FEDORA_2018-CBC52E8812.NASL", "OPENSUSE-2018-171.NASL", "FREEBSD_PKG_7AFC5E56156D11E895F2005056925DB4.NASL"]}, {"type": "fedora", "idList": ["FEDORA:E974A605DCC5", "FEDORA:6C6916015189"]}, {"type": "archlinux", "idList": ["ASA-201802-8"]}, {"type": "ubuntu", "idList": ["USN-4046-1", "USN-3590-1"]}, {"type": "cve", "idList": ["CVE-2018-7053", "CVE-2018-7052", "CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7054"]}, {"type": "slackware", "idList": ["SSA-2019-011-01"]}, {"type": "debian", "idList": ["DEBIAN:DLA-1289-1:D6F9D", "DEBIAN:DLA-1318-1:41484", "DEBIAN:DSA-4162-1:6AB47"]}], "modified": "2020-10-25T16:36:29", "rev": 2}, "score": {"value": 6.3, "vector": "NONE", "modified": "2020-10-25T16:36:29", "rev": 2}, "vulnersScore": 6.3}, "affectedPackage": [{"OS": "Slackware", "OSVersion": "14.0", "arch": "i486", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-i486-1_slack14.0.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "14.0", "arch": "x86_64", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-x86_64-1_slack14.0.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "14.1", "arch": "i486", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-i486-1_slack14.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "14.1", "arch": "x86_64", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-x86_64-1_slack14.1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "14.2", "arch": "i586", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-i586-1_slack14.2.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "14.2", "arch": "x86_64", "packageName": "irssi", "packageVersion": "1.0.7", "packageFilename": "irssi-1.0.7-x86_64-1_slack14.2.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "current", "arch": "i586", "packageName": "irssi", "packageVersion": "1.1.1", "packageFilename": "irssi-1.1.1-i586-1.txz", "operator": "lt"}, {"OS": "Slackware", "OSVersion": "current", "arch": "x86_64", "packageName": "irssi", "packageVersion": "1.1.1", "packageFilename": "irssi-1.1.1-x86_64-1.txz", "operator": "lt"}]}

{"fedora": [{"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7052", "CVE-2018-7053", "CVE-2018-7054"], "description": "Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained. ", "modified": "2018-02-26T15:45:24", "published": "2018-02-26T15:45:24", "id": "FEDORA:E974A605DCC5", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 26 Update: irssi-1.0.7-1.fc26", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:54", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7052", "CVE-2018-7053", "CVE-2018-7054"], "description": "Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained. ", "modified": "2018-02-26T16:54:14", "published": "2018-02-26T16:54:14", "id": "FEDORA:6C6916015189", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 27 Update: irssi-1.0.7-1.fc27", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "nessus": [{"lastseen": "2021-01-07T10:21:40", "description": "This is new version fixing multiple vulnerabilities: CVE-2018-7050,\nCVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "edition": 16, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-27T00:00:00", "title": "Fedora 26 : irssi (2018-cbc52e8812)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2018-02-27T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:irssi", "cpe:/o:fedoraproject:fedora:26"], "id": "FEDORA_2018-CBC52E8812.NASL", "href": "https://www.tenable.com/plugins/nessus/107013", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-cbc52e8812.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(107013);\n script_version(\"3.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n script_xref(name:\"FEDORA\", value:\"2018-cbc52e8812\");\n\n script_name(english:\"Fedora 26 : irssi (2018-cbc52e8812)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This is new version fixing multiple vulnerabilities: CVE-2018-7050,\nCVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-cbc52e8812\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected irssi package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:26\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/02/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/26\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/27\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^26([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 26\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC26\", reference:\"irssi-1.0.7-1.fc26\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T10:17:08", "description": "This is new version fixing multiple vulnerabilities: CVE-2018-7050,\nCVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.", "edition": 16, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-27T00:00:00", "title": "Fedora 27 : irssi (2018-433d2dc3c7)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2018-02-27T00:00:00", "cpe": ["cpe:/o:fedoraproject:fedora:27", "p-cpe:/a:fedoraproject:fedora:irssi"], "id": "FEDORA_2018-433D2DC3C7.NASL", "href": "https://www.tenable.com/plugins/nessus/107008", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory FEDORA-2018-433d2dc3c7.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(107008);\n script_version(\"3.4\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n script_xref(name:\"FEDORA\", value:\"2018-433d2dc3c7\");\n\n script_name(english:\"Fedora 27 : irssi (2018-433d2dc3c7)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This is new version fixing multiple vulnerabilities: CVE-2018-7050,\nCVE-2018-7051, CVE-2018-7052, CVE-2018-7053, CVE-2018-7054.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora update system website.\nTenable has attempted to automatically clean and format it as much as\npossible without introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bodhi.fedoraproject.org/updates/FEDORA-2018-433d2dc3c7\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected irssi package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:27\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/02/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/26\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/27\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = pregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^27([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 27\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"FC27\", reference:\"irssi-1.0.7-1.fc27\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-02-01T01:12:05", "description": "New irssi packages are available for Slackware 14.0, 14.1, 14.2, and\n-current to fix security issues.", "edition": 23, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-16T00:00:00", "title": "Slackware 14.0 / 14.1 / 14.2 / current : irssi (SSA:2018-046-01)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2021-02-02T00:00:00", "cpe": ["cpe:/o:slackware:slackware_linux:14.2", "cpe:/o:slackware:slackware_linux:14.1", "cpe:/o:slackware:slackware_linux:14.0", "cpe:/o:slackware:slackware_linux", "p-cpe:/a:slackware:slackware_linux:irssi"], "id": "SLACKWARE_SSA_2018-046-01.NASL", "href": "https://www.tenable.com/plugins/nessus/106850", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2018-046-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106850);\n script_version(\"$Revision: 3.3 $\");\n script_cvs_date(\"$Date: 2018/02/26 14:45:58 $\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n script_xref(name:\"SSA\", value:\"2018-046-01\");\n\n script_name(english:\"Slackware 14.0 / 14.1 / 14.2 / current : irssi (SSA:2018-046-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"New irssi packages are available for Slackware 14.0, 14.1, 14.2, and\n-current to fix security issues.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.437110\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?334e39de\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected irssi package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.2\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/16\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/16\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 Tenable Network Security, Inc.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"14.0\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"i486\", pkgnum:\"1_slack14.0\")) flag++;\nif (slackware_check(osver:\"14.0\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.0\")) flag++;\n\nif (slackware_check(osver:\"14.1\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"i486\", pkgnum:\"1_slack14.1\")) flag++;\nif (slackware_check(osver:\"14.1\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.1\")) flag++;\n\nif (slackware_check(osver:\"14.2\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"i586\", pkgnum:\"1_slack14.2\")) flag++;\nif (slackware_check(osver:\"14.2\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.0.7\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.2\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"irssi\", pkgver:\"1.1.1\", pkgarch:\"i586\", pkgnum:\"1\")) flag++;\nif (slackware_check(osver:\"current\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.1.1\", pkgarch:\"x86_64\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-02-01T02:52:00", "description": "Irssi reports :\n\nUse after free when server is disconnected during netsplits. Found by\nJoseph Bisch.\n\nUse after free when SASL messages are received in unexpected order.\nFound by Joseph Bisch.\n\nNULL pointer dereference when an 'empty' nick has been observed by\nIrssi. Found by Joseph Bisch.\n\nWhen the number of windows exceed the available space, Irssi would\ncrash due to NULL pointer dereference. Found by Joseph Bisch.\n\nCertain nick names could result in out of bounds access when printing\ntheme strings. Found by Oss-Fuzz.", "edition": 27, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-20T00:00:00", "title": "FreeBSD : irssi -- multiple vulnerabilities (7afc5e56-156d-11e8-95f2-005056925db4)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2021-02-02T00:00:00", "cpe": ["cpe:/o:freebsd:freebsd", "p-cpe:/a:freebsd:freebsd:irssi"], "id": "FREEBSD_PKG_7AFC5E56156D11E895F2005056925DB4.NASL", "href": "https://www.tenable.com/plugins/nessus/106881", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from the FreeBSD VuXML database :\n#\n# Copyright 2003-2018 Jacques Vidrine and contributors\n#\n# Redistribution and use in source (VuXML) and 'compiled' forms (SGML,\n# HTML, PDF, PostScript, RTF and so forth) with or without modification,\n# are permitted provided that the following conditions are met:\n# 1. Redistributions of source code (VuXML) must retain the above\n# copyright notice, this list of conditions and the following\n# disclaimer as the first lines of this file unmodified.\n# 2. Redistributions in compiled form (transformed to other DTDs,\n# published online in any format, converted to PDF, PostScript,\n# RTF and other formats) must reproduce the above copyright\n# notice, this list of conditions and the following disclaimer\n# in the documentation and/or other materials provided with the\n# distribution.\n# \n# THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS \"AS IS\"\n# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,\n# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR\n# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS\n# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,\n# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT\n# OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR\n# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,\n# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE\n# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,\n# EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(106881);\n script_version(\"3.4\");\n script_cvs_date(\"Date: 2018/11/10 11:49:47\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n\n script_name(english:\"FreeBSD : irssi -- multiple vulnerabilities (7afc5e56-156d-11e8-95f2-005056925db4)\");\n script_summary(english:\"Checks for updated package in pkg_info output\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote FreeBSD host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Irssi reports :\n\nUse after free when server is disconnected during netsplits. Found by\nJoseph Bisch.\n\nUse after free when SASL messages are received in unexpected order.\nFound by Joseph Bisch.\n\nNULL pointer dereference when an 'empty' nick has been observed by\nIrssi. Found by Joseph Bisch.\n\nWhen the number of windows exceed the available space, Irssi would\ncrash due to NULL pointer dereference. Found by Joseph Bisch.\n\nCertain nick names could result in out of bounds access when printing\ntheme strings. Found by Oss-Fuzz.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://irssi.org/security/irssi_sa_2018_02.txt\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226001\"\n );\n # https://vuxml.freebsd.org/freebsd/7afc5e56-156d-11e8-95f2-005056925db4.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?11c0294b\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:freebsd:freebsd:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:freebsd:freebsd\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/02/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/19\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/20\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"FreeBSD Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/FreeBSD/release\", \"Host/FreeBSD/pkg_info\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"freebsd_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/FreeBSD/release\")) audit(AUDIT_OS_NOT, \"FreeBSD\");\nif (!get_kb_item(\"Host/FreeBSD/pkg_info\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\n\nif (pkg_test(save_report:TRUE, pkg:\"irssi<1.1.1,1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-20T12:36:00", "description": "This update for irssi fixes the following security issues :\n\n - CVE-2018-7054: Use after free when server is\n disconnected during netsplits\n\n - CVE-2018-7053: Use after free when SASL messages are\n received in unexpected order\n\n - CVE-2018-7050: NULL pointer dereference when an 'empty'\n nick has been observed\n\n - CVE-2018-7052: When the number of windows exceed the\n available space, Irssi would crash due to NULL pointer\n dereference\n\n - CVE-2018-7051: Certain nick names could result in out of\n bounds access when printing theme strings", "edition": 20, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-02-20T00:00:00", "title": "openSUSE Security Update : irssi (openSUSE-2018-171)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2018-02-20T00:00:00", "cpe": ["p-cpe:/a:novell:opensuse:irssi", "p-cpe:/a:novell:opensuse:irssi-debugsource", "p-cpe:/a:novell:opensuse:irssi-devel", "p-cpe:/a:novell:opensuse:irssi-debuginfo", "cpe:/o:novell:opensuse:42.3"], "id": "OPENSUSE-2018-171.NASL", "href": "https://www.tenable.com/plugins/nessus/106889", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from openSUSE Security Update openSUSE-2018-171.\n#\n# The text description of this plugin is (C) SUSE LLC.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(106889);\n script_version(\"3.5\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/19\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n\n script_name(english:\"openSUSE Security Update : irssi (openSUSE-2018-171)\");\n script_summary(english:\"Check for the openSUSE-2018-171 patch\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote openSUSE host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update for irssi fixes the following security issues :\n\n - CVE-2018-7054: Use after free when server is\n disconnected during netsplits\n\n - CVE-2018-7053: Use after free when SASL messages are\n received in unexpected order\n\n - CVE-2018-7050: NULL pointer dereference when an 'empty'\n nick has been observed\n\n - CVE-2018-7052: When the number of windows exceed the\n available space, Irssi would crash due to NULL pointer\n dereference\n\n - CVE-2018-7051: Certain nick names could result in out of\n bounds access when printing theme strings\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.opensuse.org/show_bug.cgi?id=1081238\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected irssi packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:irssi-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:irssi-debugsource\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:novell:opensuse:irssi-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:novell:opensuse:42.3\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/19\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/20\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 Tenable Network Security, Inc.\");\n script_family(english:\"SuSE Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/SuSE/release\", \"Host/SuSE/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/SuSE/release\");\nif (isnull(release) || release =~ \"^(SLED|SLES)\") audit(AUDIT_OS_NOT, \"openSUSE\");\nif (release !~ \"^(SUSE42\\.3)$\") audit(AUDIT_OS_RELEASE_NOT, \"openSUSE\", \"42.3\", release);\nif (!get_kb_item(\"Host/SuSE/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\nourarch = get_kb_item(\"Host/cpu\");\nif (!ourarch) audit(AUDIT_UNKNOWN_ARCH);\nif (ourarch !~ \"^(i586|i686|x86_64)$\") audit(AUDIT_ARCH_NOT, \"i586 / i686 / x86_64\", ourarch);\n\nflag = 0;\n\nif ( rpm_check(release:\"SUSE42.3\", reference:\"irssi-1.0.7-25.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"irssi-debuginfo-1.0.7-25.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"irssi-debugsource-1.0.7-25.1\") ) flag++;\nif ( rpm_check(release:\"SUSE42.3\", reference:\"irssi-devel-1.0.7-25.1\") ) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi / irssi-debuginfo / irssi-debugsource / irssi-devel\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-03-17T22:42:02", "description": "New irssi packages are available for Slackware 14.0, 14.1, 14.2, and\n-current to fix security issues.", "edition": 7, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2019-01-14T00:00:00", "title": "Slackware 14.0 / 14.1 / 14.2 / current : irssi (SSA:2019-011-01)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2019-5882", "CVE-2018-7052"], "modified": "2019-01-14T00:00:00", "cpe": ["cpe:/o:slackware:slackware_linux:14.2", "cpe:/o:slackware:slackware_linux:14.1", "cpe:/o:slackware:slackware_linux:14.0", "cpe:/o:slackware:slackware_linux", "p-cpe:/a:slackware:slackware_linux:irssi"], "id": "SLACKWARE_SSA_2019-011-01.NASL", "href": "https://www.tenable.com/plugins/nessus/121144", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Slackware Security Advisory 2019-011-01. The text \n# itself is copyright (C) Slackware Linux, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(121144);\n script_version(\"1.2\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2020/02/24\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\", \"CVE-2019-5882\");\n script_xref(name:\"SSA\", value:\"2019-011-01\");\n\n script_name(english:\"Slackware 14.0 / 14.1 / 14.2 / current : irssi (SSA:2019-011-01)\");\n script_summary(english:\"Checks for updated package in /var/log/packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Slackware host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"New irssi packages are available for Slackware 14.0, 14.1, 14.2, and\n-current to fix security issues.\"\n );\n # http://www.slackware.com/security/viewer.php?l=slackware-security&y=2019&m=slackware-security.478665\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4abc2ae0\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected irssi package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:slackware:slackware_linux:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:slackware:slackware_linux:14.2\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/02/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2019/01/11\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2019/01/14\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Slackware Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Slackware/release\", \"Host/Slackware/packages\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"slackware.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Slackware/release\")) audit(AUDIT_OS_NOT, \"Slackware\");\nif (!get_kb_item(\"Host/Slackware/packages\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Slackware\", cpu);\n\n\nflag = 0;\nif (slackware_check(osver:\"14.0\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"i486\", pkgnum:\"1_slack14.0\")) flag++;\nif (slackware_check(osver:\"14.0\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.0\")) flag++;\n\nif (slackware_check(osver:\"14.1\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"i486\", pkgnum:\"1_slack14.1\")) flag++;\nif (slackware_check(osver:\"14.1\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.1\")) flag++;\n\nif (slackware_check(osver:\"14.2\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"i586\", pkgnum:\"1_slack14.2\")) flag++;\nif (slackware_check(osver:\"14.2\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"x86_64\", pkgnum:\"1_slack14.2\")) flag++;\n\nif (slackware_check(osver:\"current\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"i586\", pkgnum:\"1\")) flag++;\nif (slackware_check(osver:\"current\", arch:\"x86_64\", pkgname:\"irssi\", pkgver:\"1.1.2\", pkgarch:\"x86_64\", pkgnum:\"1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:slackware_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-02-01T07:24:52", "description": "It was discovered that Irssi incorrectly handled certain empty nick\nnames. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-7050)\n\nIt was discovered that Irssi incorrectly handled certain nick names.\nAn attacker could possibly use this to access sensitive information.\n(CVE-2018-7051)\n\nIt was discovered that Irssi incorrectly handled an increase in the\nnumber of windows. An attacker could possibly use this issue to cause\na denial of service. (CVE-2018-7052)\n\nIt was discovered that Irssi incorrectly handled certain messages. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 17.10. (CVE-2018-7053)\n\nIt was discovered that Irssi incorrectly handled certain\ndisconnections. An attacker could possibly use this to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu\n17.10. (CVE-2018-7054).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 25, "cvss3": {"score": 9.8, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "published": "2018-03-07T00:00:00", "title": "Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : irssi vulnerabilities (USN-3590-1)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7073", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "modified": "2021-02-02T00:00:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "p-cpe:/a:canonical:ubuntu_linux:irssi", "cpe:/o:canonical:ubuntu_linux:14.04"], "id": "UBUNTU_USN-3590-1.NASL", "href": "https://www.tenable.com/plugins/nessus/107193", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Ubuntu Security Notice USN-3590-1. The text \n# itself is copyright (C) Canonical, Inc. See \n# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered \n# trademark of Canonical, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(107193);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2019/09/18 12:31:48\");\n\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\", \"CVE-2018-7073\");\n script_xref(name:\"TRA\", value:\"TRA-2018-15\");\n script_xref(name:\"USN\", value:\"3590-1\");\n\n script_name(english:\"Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : irssi vulnerabilities (USN-3590-1)\");\n script_summary(english:\"Checks dpkg output for updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Ubuntu host is missing a security-related patch.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that Irssi incorrectly handled certain empty nick\nnames. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-7050)\n\nIt was discovered that Irssi incorrectly handled certain nick names.\nAn attacker could possibly use this to access sensitive information.\n(CVE-2018-7051)\n\nIt was discovered that Irssi incorrectly handled an increase in the\nnumber of windows. An attacker could possibly use this issue to cause\na denial of service. (CVE-2018-7052)\n\nIt was discovered that Irssi incorrectly handled certain messages. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 17.10. (CVE-2018-7053)\n\nIt was discovered that Irssi incorrectly handled certain\ndisconnections. An attacker could possibly use this to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu\n17.10. (CVE-2018-7054).\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Ubuntu security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://usn.ubuntu.com/3590-1/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.tenable.com/security/research/tra-2018-15\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected irssi package.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:canonical:ubuntu_linux:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:14.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:16.04\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:canonical:ubuntu_linux:17.10\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2018/02/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/03/06\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/07\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Ubuntu Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/cpu\", \"Host/Ubuntu\", \"Host/Ubuntu/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"ubuntu.inc\");\ninclude(\"misc_func.inc\");\n\nif ( ! get_kb_item(\"Host/local_checks_enabled\") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Ubuntu/release\");\nif ( isnull(release) ) audit(AUDIT_OS_NOT, \"Ubuntu\");\nrelease = chomp(release);\nif (! preg(pattern:\"^(14\\.04|16\\.04|17\\.10)$\", string:release)) audit(AUDIT_OS_NOT, \"Ubuntu 14.04 / 16.04 / 17.10\", \"Ubuntu \" + release);\nif ( ! get_kb_item(\"Host/Debian/dpkg-l\") ) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Ubuntu\", cpu);\n\nflag = 0;\n\nif (ubuntu_check(osver:\"14.04\", pkgname:\"irssi\", pkgver:\"0.8.15-5ubuntu3.5\")) flag++;\nif (ubuntu_check(osver:\"16.04\", pkgname:\"irssi\", pkgver:\"0.8.19-1ubuntu1.7\")) flag++;\nif (ubuntu_check(osver:\"17.10\", pkgname:\"irssi\", pkgver:\"1.0.4-1ubuntu2.3\")) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : ubuntu_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = ubuntu_pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi\");\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-01-07T08:53:13", "description": "According to the versions of the irssi package installed, the EulerOS\ninstallation on the remote host is affected by the following\nvulnerabilities :\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. A NULL pointer dereference occurs for an\n 'empty' nick.i1/4^ CVE-2018-7050i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. Certain nick names could result in\n out-of-bounds access when printing theme\n strings.i1/4^CVE-2018-7051i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. When the number of windows exceeds the\n available space, a crash due to a NULL pointer\n dereference would occur.i1/4^CVE-2018-7052i1/4%0\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 61, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2018-03-20T00:00:00", "title": "EulerOS 2.0 SP2 : irssi (EulerOS-SA-2018-1061)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "modified": "2018-03-20T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:irssi", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2018-1061.NASL", "href": "https://www.tenable.com/plugins/nessus/108465", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(108465);\n script_version(\"1.62\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2018-7050\",\n \"CVE-2018-7051\",\n \"CVE-2018-7052\"\n );\n\n script_name(english:\"EulerOS 2.0 SP2 : irssi (EulerOS-SA-2018-1061)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the irssi package installed, the EulerOS\ninstallation on the remote host is affected by the following\nvulnerabilities :\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. A NULL pointer dereference occurs for an\n 'empty' nick.i1/4^ CVE-2018-7050i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. Certain nick names could result in\n out-of-bounds access when printing theme\n strings.i1/4^CVE-2018-7051i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. When the number of windows exceeds the\n available space, a crash due to a NULL pointer\n dereference would occur.i1/4^CVE-2018-7052i1/4%0\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1061\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?77a272f8\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected irssi packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/20\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(2)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP2\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"irssi-0.8.15-16.h3\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"2\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-07T08:53:13", "description": "According to the versions of the irssi package installed, the EulerOS\ninstallation on the remote host is affected by the following\nvulnerabilities :\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. A NULL pointer dereference occurs for an\n 'empty' nick.i1/4^ CVE-2018-7050i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. Certain nick names could result in\n out-of-bounds access when printing theme\n strings.i1/4^CVE-2018-7051i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. When the number of windows exceeds the\n available space, a crash due to a NULL pointer\n dereference would occur.i1/4^CVE-2018-7052i1/4%0\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 60, "cvss3": {"score": 7.5, "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "published": "2018-03-20T00:00:00", "title": "EulerOS 2.0 SP1 : irssi (EulerOS-SA-2018-1060)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "modified": "2018-03-20T00:00:00", "cpe": ["p-cpe:/a:huawei:euleros:irssi", "cpe:/o:huawei:euleros:2.0"], "id": "EULEROS_SA-2018-1060.NASL", "href": "https://www.tenable.com/plugins/nessus/108464", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(108464);\n script_version(\"1.57\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\n \"CVE-2018-7050\",\n \"CVE-2018-7051\",\n \"CVE-2018-7052\"\n );\n\n script_name(english:\"EulerOS 2.0 SP1 : irssi (EulerOS-SA-2018-1060)\");\n script_summary(english:\"Checks the rpm output for the updated packages.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote EulerOS host is missing multiple security updates.\");\n script_set_attribute(attribute:\"description\", value:\n\"According to the versions of the irssi package installed, the EulerOS\ninstallation on the remote host is affected by the following\nvulnerabilities :\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. A NULL pointer dereference occurs for an\n 'empty' nick.i1/4^ CVE-2018-7050i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. Certain nick names could result in\n out-of-bounds access when printing theme\n strings.i1/4^CVE-2018-7051i1/4%0\n\n - An issue was discovered in Irssi before 1.0.7 and 1.1.x\n before 1.1.1. When the number of windows exceeds the\n available space, a crash due to a NULL pointer\n dereference would occur.i1/4^CVE-2018-7052i1/4%0\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the EulerOS security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\");\n # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1060\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?2cec6c03\");\n script_set_attribute(attribute:\"solution\", value:\n\"Update the affected irssi packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/03/20\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:huawei:euleros:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:huawei:euleros:2.0\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Huawei Local Security Checks\");\n\n script_copyright(english:\"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/EulerOS/release\", \"Host/EulerOS/rpm-list\", \"Host/EulerOS/sp\");\n script_exclude_keys(\"Host/EulerOS/uvp_version\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\n\nrelease = get_kb_item(\"Host/EulerOS/release\");\nif (isnull(release) || release !~ \"^EulerOS\") audit(AUDIT_OS_NOT, \"EulerOS\");\nif (release !~ \"^EulerOS release 2\\.0(\\D|$)\") audit(AUDIT_OS_NOT, \"EulerOS 2.0\");\n\nsp = get_kb_item(\"Host/EulerOS/sp\");\nif (isnull(sp) || sp !~ \"^(1)$\") audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\");\n\nuvp = get_kb_item(\"Host/EulerOS/uvp_version\");\nif (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, \"EulerOS 2.0 SP1\", \"EulerOS UVP \" + uvp);\n\nif (!get_kb_item(\"Host/EulerOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"aarch64\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"EulerOS\", cpu);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_ARCH_NOT, \"i686 / x86_64\", cpu);\n\nflag = 0;\n\npkgs = [\"irssi-0.8.15-16.h5\"];\n\nforeach (pkg in pkgs)\n if (rpm_check(release:\"EulerOS-2.0\", sp:\"1\", reference:pkg)) flag++;\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_WARNING,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"irssi\");\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2021-01-12T09:39:04", "description": "It was discovered that there where a number of vulnerabilities in\nirssi, the terminal based IRC client :\n\n - CVE-2018-7050: NULL pointer dereference for an 'empty'\n nick.\n\n - CVE-2018-7051: Certain nick names could result in\n out-of-bounds access when printing theme strings.\n\n - CVE-2018-7052: When the number of windows exceeds the\n available space, a crash could occur due to another NULL\n pointer dereference.\n\nFor Debian 7 'Wheezy', these issues have been fixed in irssi version\n0.8.15-5+deb7u5.\n\nWe recommend that you upgrade your irssi packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.", "edition": 11, "published": "2018-02-23T00:00:00", "title": "Debian DLA-1289-1 : irssi security update", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "modified": "2018-02-23T00:00:00", "cpe": ["p-cpe:/a:debian:debian_linux:irssi", "cpe:/o:debian:debian_linux:7.0", "p-cpe:/a:debian:debian_linux:irssi-dev"], "id": "DEBIAN_DLA-1289.NASL", "href": "https://www.tenable.com/plugins/nessus/106954", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Debian Security Advisory DLA-1289-1. The text\n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(106954);\n script_version(\"3.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_name(english:\"Debian DLA-1289-1 : irssi security update\");\n script_summary(english:\"Checks dpkg output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that there where a number of vulnerabilities in\nirssi, the terminal based IRC client :\n\n - CVE-2018-7050: NULL pointer dereference for an 'empty'\n nick.\n\n - CVE-2018-7051: Certain nick names could result in\n out-of-bounds access when printing theme strings.\n\n - CVE-2018-7052: When the number of windows exceeds the\n available space, a crash could occur due to another NULL\n pointer dereference.\n\nFor Debian 7 'Wheezy', these issues have been fixed in irssi version\n0.8.15-5+deb7u5.\n\nWe recommend that you upgrade your irssi packages.\n\nNOTE: Tenable Network Security has extracted the preceding description\nblock directly from the DLA security advisory. Tenable has attempted\nto automatically clean and format it as much as possible without\nintroducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://lists.debian.org/debian-lts-announce/2018/02/msg00024.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/wheezy/irssi\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Upgrade the affected irssi, and irssi-dev packages.\"\n );\n script_set_attribute(attribute:\"risk_factor\", value:\"High\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:irssi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:irssi-dev\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:7.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2018/02/22\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2018/02/23\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2018-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"7.0\", prefix:\"irssi\", reference:\"0.8.15-5+deb7u5\")) flag++;\nif (deb_check(release:\"7.0\", prefix:\"irssi-dev\", reference:\"0.8.15-5+deb7u5\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}], "archlinux": [{"lastseen": "2020-09-22T18:36:42", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7052", "CVE-2018-7053", "CVE-2018-7054"], "description": "Arch Linux Security Advisory ASA-201802-8\n=========================================\n\nSeverity: High\nDate : 2018-02-15\nCVE-ID : CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053\nCVE-2018-7054\nPackage : irssi\nType : multiple issues\nRemote : Yes\nLink : https://security.archlinux.org/AVG-616\n\nSummary\n=======\n\nThe package irssi before version 1.1.1-1 is vulnerable to multiple\nissues including arbitrary code execution, information disclosure and\ndenial of service.\n\nResolution\n==========\n\nUpgrade to 1.1.1-1.\n\n# pacman -Syu \"irssi>=1.1.1-1\"\n\nThe problems have been fixed upstream in version 1.1.1.\n\nWorkaround\n==========\n\nNone.\n\nDescription\n===========\n\n- CVE-2018-7050 (arbitrary code execution)\n\nAn issue was discovered in Irssi before 1.1.1. A NULL pointer\ndereference occurs for an \"empty\" nick.\n\n- CVE-2018-7051 (information disclosure)\n\nAn issue was discovered in Irssi before 1.1.1. Certain nick names could\nresult in out-of-bounds access when printing theme strings.\n\n- CVE-2018-7052 (denial of service)\n\nAn issue was discovered in Irssi before 1.1.1. When the number of\nwindows exceeds the available space, a crash due to a NULL pointer\ndereference would occur.\n\n- CVE-2018-7053 (arbitrary code execution)\n\nAn issue was discovered in Irssi before 1.1.1. There is a use-after-\nfree when SASL messages are received in an unexpected order.\n\n- CVE-2018-7054 (arbitrary code execution)\n\nAn issue was discovered in Irssi before 1.1.1. There is a use-after-\nfree when a server is disconnected during netsplits.\n\nImpact\n======\n\nA remote attacker is able to crash the application, execute arbitrary\ncode or read memory via a malicious server or by tricking a user to use\nmalicious commands.\n\nReferences\n==========\n\nhttps://irssi.org/security/irssi_sa_2018_02.txt\nhttps://security.archlinux.org/CVE-2018-7050\nhttps://security.archlinux.org/CVE-2018-7051\nhttps://security.archlinux.org/CVE-2018-7052\nhttps://security.archlinux.org/CVE-2018-7053\nhttps://security.archlinux.org/CVE-2018-7054", "modified": "2018-02-15T00:00:00", "published": "2018-02-15T00:00:00", "id": "ASA-201802-8", "href": "https://security.archlinux.org/ASA-201802-8", "type": "archlinux", "title": "[ASA-201802-8] irssi: multiple issues", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "openvas": [{"lastseen": "2019-05-29T18:33:10", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2018-02-27T00:00:00", "id": "OPENVAS:1361412562310874148", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874148", "type": "openvas", "title": "Fedora Update for irssi FEDORA-2018-cbc52e8812", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_cbc52e8812_irssi_fc26.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for irssi FEDORA-2018-cbc52e8812\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874148\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-27 08:19:36 +0100 (Tue, 27 Feb 2018)\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\",\n \"CVE-2018-7054\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for irssi FEDORA-2018-cbc52e8812\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'irssi'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"irssi on Fedora 26\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-cbc52e8812\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQK7QPMCHH2NGXGVLKDB44MEQCP6QR3P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC26\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC26\")\n{\n\n if ((res = isrpmvuln(pkg:\"irssi\", rpm:\"irssi~1.0.7~1.fc26\", rls:\"FC26\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:33:10", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2018-02-27T00:00:00", "id": "OPENVAS:1361412562310874152", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310874152", "type": "openvas", "title": "Fedora Update for irssi FEDORA-2018-433d2dc3c7", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_fedora_2018_433d2dc3c7_irssi_fc27.nasl 14223 2019-03-15 13:49:35Z cfischer $\n#\n# Fedora Update for irssi FEDORA-2018-433d2dc3c7\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.874152\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2018-02-27 08:19:51 +0100 (Tue, 27 Feb 2018)\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\",\n \"CVE-2018-7054\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_name(\"Fedora Update for irssi FEDORA-2018-433d2dc3c7\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'irssi'\n package(s) announced via the referenced advisory.\");\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n script_tag(name:\"affected\", value:\"irssi on Fedora 27\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_xref(name:\"FEDORA\", value:\"2018-433d2dc3c7\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGK4VSC22NDKFZQI2HRSHCTKNUKJKSCM\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC27\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC27\")\n{\n\n if ((res = isrpmvuln(pkg:\"irssi\", rpm:\"irssi~1.0.7~1.fc27\", rls:\"FC27\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-06-24T16:46:04", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "description": "The remote host is missing an update for the ", "modified": "2019-06-22T00:00:00", "published": "2018-10-26T00:00:00", "id": "OPENVAS:1361412562310843714", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310843714", "type": "openvas", "title": "Ubuntu Update for irssi USN-3590-1", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Ubuntu Update for irssi USN-3590-1\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (C) 2018 Greenbone Networks GmbH, http://www.greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.843714\");\n script_version(\"2019-06-22T13:31:53+0000\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2019-06-22 13:31:53 +0000 (Sat, 22 Jun 2019)\");\n script_tag(name:\"creation_date\", value:\"2018-10-26 06:10:14 +0200 (Fri, 26 Oct 2018)\");\n script_name(\"Ubuntu Update for irssi USN-3590-1\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=UBUNTU(14\\.04 LTS|17\\.10|16\\.04 LTS)\");\n\n script_xref(name:\"USN\", value:\"3590-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-3590-1/\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'irssi'\n package(s) announced via the USN-3590-1 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"It was discovered that Irssi incorrectly handled certain empty\nnick names. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2018-7050)\n\nIt was discovered that Irssi incorrectly handled certain nick names.\nAn attacker could possibly use this to access sensitive information.\n(CVE-2018-7051)\n\nIt was discovered that Irssi incorrectly handled an increase in the\nnumber of windows. An attacker could possibly use this issue to cause\na denial of service. (CVE-2018-7052)\n\nIt was discovered that Irssi incorrectly handled certain messages.\nAn attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. This issue only affected Ubuntu 16.04 LTS\nand Ubuntu 17.10. (CVE-2018-7053)\n\nIt was discovered that Irssi incorrectly handled certain\ndisconnections. An attacker could possibly use this to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu\n17.10. (CVE-2018-7054)\");\n\n script_tag(name:\"affected\", value:\"irssi on Ubuntu 17.10,\n Ubuntu 16.04 LTS,\n Ubuntu 14.04 LTS.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"UBUNTU14.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"irssi\", ver:\"0.8.15-5ubuntu3.5\", rls:\"UBUNTU14.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU17.10\")\n{\n\n if ((res = isdpkgvuln(pkg:\"irssi\", ver:\"1.0.4-1ubuntu2.3\", rls:\"UBUNTU17.10\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n\n\nif(release == \"UBUNTU16.04 LTS\")\n{\n\n if ((res = isdpkgvuln(pkg:\"irssi\", ver:\"0.8.19-1ubuntu1.7\", rls:\"UBUNTU16.04 LTS\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-29T20:09:34", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "description": "It was discovered that there where a number of vulnerabilities in irssi,\nthe terminal based IRC client:\n\n - CVE-2018-7050: Null pointer dereference for an ", "modified": "2020-01-29T00:00:00", "published": "2018-03-27T00:00:00", "id": "OPENVAS:1361412562310891289", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310891289", "type": "openvas", "title": "Debian LTS: Security Advisory for irssi (DLA-1289-1)", "sourceData": "# Copyright (C) 2018 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.891289\");\n script_version(\"2020-01-29T08:22:52+0000\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\");\n script_name(\"Debian LTS: Security Advisory for irssi (DLA-1289-1)\");\n script_tag(name:\"last_modification\", value:\"2020-01-29 08:22:52 +0000 (Wed, 29 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2018-03-27 00:00:00 +0200 (Tue, 27 Mar 2018)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://lists.debian.org/debian-lts-announce/2018/02/msg00024.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB7\");\n\n script_tag(name:\"affected\", value:\"irssi on Debian Linux\");\n\n script_tag(name:\"solution\", value:\"For Debian 7 'Wheezy', these issues have been fixed in irssi version\n0.8.15-5+deb7u5.\n\nWe recommend that you upgrade your irssi packages.\");\n\n script_tag(name:\"summary\", value:\"It was discovered that there where a number of vulnerabilities in irssi,\nthe terminal based IRC client:\n\n - CVE-2018-7050: Null pointer dereference for an 'empty' nick.\n\n - CVE-2018-7051: Certain nick names could result in out-of-bounds\n access when printing theme strings.\n\n - CVE-2018-7052: When the number of windows exceeds the available space, a\n crash could occur due to another NULL pointer dereference.\");\n\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"0.8.15-5+deb7u5\", rls:\"DEB7\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"irssi-dev\", ver:\"0.8.15-5+deb7u5\", rls:\"DEB7\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2020-01-27T18:39:47", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220181060", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220181060", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for irssi (EulerOS-SA-2018-1060)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2018.1060\");\n script_version(\"2020-01-23T11:11:06+0000\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 11:11:06 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 11:11:06 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for irssi (EulerOS-SA-2018-1060)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP1\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2018-1060\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1060\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'irssi' package(s) announced via the EulerOS-SA-2018-1060 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an 'empty' nick. CVE-2018-7050\n\nAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.CVE-2018-7051\n\nAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.CVE-2018-7052\");\n\n script_tag(name:\"affected\", value:\"'irssi' package(s) on Huawei EulerOS V2.0SP1.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP1\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"irssi\", rpm:\"irssi~0.8.15~16.h5\", rls:\"EULEROS-2.0SP1\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2020-01-27T18:34:04", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "description": "The remote host is missing an update for the Huawei EulerOS\n ", "modified": "2020-01-23T00:00:00", "published": "2020-01-23T00:00:00", "id": "OPENVAS:1361412562311220181061", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562311220181061", "type": "openvas", "title": "Huawei EulerOS: Security Advisory for irssi (EulerOS-SA-2018-1061)", "sourceData": "# Copyright (C) 2020 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.1.2.2018.1061\");\n script_version(\"2020-01-23T11:11:09+0000\");\n script_cve_id(\"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_tag(name:\"last_modification\", value:\"2020-01-23 11:11:09 +0000 (Thu, 23 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2020-01-23 11:11:09 +0000 (Thu, 23 Jan 2020)\");\n script_name(\"Huawei EulerOS: Security Advisory for irssi (EulerOS-SA-2018-1061)\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2020 Greenbone Networks GmbH\");\n script_family(\"Huawei EulerOS Local Security Checks\");\n script_dependencies(\"gb_huawei_euleros_consolidation.nasl\");\n script_mandatory_keys(\"ssh/login/euleros\", \"ssh/login/rpms\", re:\"ssh/login/release=EULEROS-2\\.0SP2\");\n\n script_xref(name:\"EulerOS-SA\", value:\"2018-1061\");\n script_xref(name:\"URL\", value:\"https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1061\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the Huawei EulerOS\n 'irssi' package(s) announced via the EulerOS-SA-2018-1061 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an 'empty' nick. CVE-2018-7050\n\nAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.CVE-2018-7051\n\nAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.CVE-2018-7052\");\n\n script_tag(name:\"affected\", value:\"'irssi' package(s) on Huawei EulerOS V2.0SP2.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"EULEROS-2.0SP2\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"irssi\", rpm:\"irssi~0.8.15~16.h3\", rls:\"EULEROS-2.0SP2\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2019-07-04T18:56:10", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-5205", "CVE-2018-5206", "CVE-2018-5207", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-5208", "CVE-2018-7052"], "description": "Multiple vulnerabilities have been discovered in Irssi, a terminal-based\nIRC client which can result in denial of service.", "modified": "2019-07-04T00:00:00", "published": "2018-04-01T00:00:00", "id": "OPENVAS:1361412562310704162", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310704162", "type": "openvas", "title": "Debian Security Advisory DSA 4162-1 (irssi - security update)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Auto-generated from advisory DSA 4162-1 using nvtgen 1.0\n# Script version: 1.0\n#\n# Author:\n# Greenbone Networks\n#\n# Copyright:\n# Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License as published by\n# the Free Software Foundation; either version 2 of the License, or\n# (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.704162\");\n script_version(\"2019-07-04T09:25:28+0000\");\n script_cve_id(\"CVE-2018-5205\", \"CVE-2018-5206\", \"CVE-2018-5207\", \"CVE-2018-5208\", \"CVE-2018-7050\", \"CVE-2018-7051\", \"CVE-2018-7052\", \"CVE-2018-7053\", \"CVE-2018-7054\");\n script_name(\"Debian Security Advisory DSA 4162-1 (irssi - security update)\");\n script_tag(name:\"last_modification\", value:\"2019-07-04 09:25:28 +0000 (Thu, 04 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2018-04-01 00:00:00 +0200 (Sun, 01 Apr 2018)\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://www.debian.org/security/2018/dsa-4162.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB9\");\n script_tag(name:\"affected\", value:\"irssi on Debian Linux\");\n script_tag(name:\"solution\", value:\"For the stable distribution (stretch), these problems have been fixed in\nversion 1.0.7-1~deb9u1.\n\nWe recommend that you upgrade your irssi packages.\");\n\n script_xref(name:\"URL\", value:\"https://security-tracker.debian.org/tracker/irssi\");\n script_tag(name:\"summary\", value:\"Multiple vulnerabilities have been discovered in Irssi, a terminal-based\nIRC client which can result in denial of service.\");\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"1.0.7-1~deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"irssi-dev\", ver:\"1.0.7-1~deb9u1\", rls:\"DEB9\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-01-29T20:11:33", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7051"], "description": "It was discovered that there was an issue in the irssi IRC client where\ncertain nick names could result in out-of-bounds access when printing\ntheme strings.", "modified": "2020-01-29T00:00:00", "published": "2018-03-27T00:00:00", "id": "OPENVAS:1361412562310891318", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310891318", "type": "openvas", "title": "Debian LTS: Security Advisory for irssi (DLA-1318-1)", "sourceData": "# Copyright (C) 2018 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) of the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.891318\");\n script_version(\"2020-01-29T08:22:52+0000\");\n script_cve_id(\"CVE-2018-7051\");\n script_name(\"Debian LTS: Security Advisory for irssi (DLA-1318-1)\");\n script_tag(name:\"last_modification\", value:\"2020-01-29 08:22:52 +0000 (Wed, 29 Jan 2020)\");\n script_tag(name:\"creation_date\", value:\"2018-03-27 00:00:00 +0200 (Tue, 27 Mar 2018)\");\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n script_xref(name:\"URL\", value:\"https://lists.debian.org/debian-lts-announce/2018/03/msg00021.html\");\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\", re:\"ssh/login/release=DEB7\");\n\n script_tag(name:\"affected\", value:\"irssi on Debian Linux\");\n\n script_tag(name:\"solution\", value:\"For Debian 7 'Wheezy', this issue has been fixed in irssi version\n0.8.15-5+deb7u6. It was incorrectly missing from the upload of\n0.8.15-5+deb7u5 announced as part of DLA-1289-1. Thanks to Ben Hutchings\nand Matus Uhlhar.\n\nWe recommend that you upgrade your irssi packages.\");\n\n script_tag(name:\"summary\", value:\"It was discovered that there was an issue in the irssi IRC client where\ncertain nick names could result in out-of-bounds access when printing\ntheme strings.\");\n\n script_tag(name:\"vuldetect\", value:\"This check tests the installed software version using the apt package manager.\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"0.8.15-5+deb7u6\", rls:\"DEB7\"))) {\n report += res;\n}\nif(!isnull(res = isdpkgvuln(pkg:\"irssi-dev\", ver:\"0.8.15-5+deb7u6\", rls:\"DEB7\"))) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if(__pkg_match) {\n exit(99);\n}\n", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}}, {"lastseen": "2019-07-12T14:48:50", "bulletinFamily": "scanner", "cvelist": ["CVE-2018-7054", "CVE-2019-13045"], "description": "The remote host is missing an update for the ", "modified": "2019-07-11T00:00:00", "published": "2019-07-05T00:00:00", "id": "OPENVAS:1361412562310844079", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310844079", "type": "openvas", "title": "Ubuntu Update for irssi USN-4046-1", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.844079\");\n script_version(\"2019-07-11T11:32:19+0000\");\n script_cve_id(\"CVE-2018-7054\", \"CVE-2019-13045\");\n script_tag(name:\"cvss_base\", value:\"7.5\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_tag(name:\"last_modification\", value:\"2019-07-11 11:32:19 +0000 (Thu, 11 Jul 2019)\");\n script_tag(name:\"creation_date\", value:\"2019-07-05 02:00:38 +0000 (Fri, 05 Jul 2019)\");\n script_name(\"Ubuntu Update for irssi USN-4046-1\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Ubuntu Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/ubuntu_linux\", \"ssh/login/packages\", re:\"ssh/login/release=(UBUNTU18\\.10|UBUNTU19\\.04|UBUNTU18\\.04 LTS|UBUNTU16\\.04 LTS)\");\n\n script_xref(name:\"USN\", value:\"4046-1\");\n script_xref(name:\"URL\", value:\"http://www.ubuntu.com/usn/usn-4046-1/\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'irssi'\n package(s) announced via the USN-4046-1 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"It was discovered that Irssi incorrectly handled certain disconnections.\nAn attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-7054)\n\nIt was discovered that Irssi incorrectly handled certain requests.\nAn attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. (CVE-2019-13045)\");\n\n script_tag(name:\"affected\", value:\"'irssi' package(s) on Ubuntu 19.04, Ubuntu 18.10, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-deb.inc\");\n\nrelease = dpkg_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"UBUNTU18.10\") {\n\n if(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"1.1.1-1ubuntu1.2\", rls:\"UBUNTU18.10\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nif(release == \"UBUNTU19.04\") {\n\n if(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"1.2.0-2ubuntu1.1\", rls:\"UBUNTU19.04\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nif(release == \"UBUNTU18.04 LTS\") {\n\n if(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"1.0.5-1ubuntu4.2\", rls:\"UBUNTU18.04 LTS\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nif(release == \"UBUNTU16.04 LTS\") {\n\n if(!isnull(res = isdpkgvuln(pkg:\"irssi\", ver:\"0.8.19-1ubuntu1.9\", rls:\"UBUNTU16.04 LTS\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "freebsd": [{"lastseen": "2019-05-29T18:32:00", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "description": "\nIrssi reports:\n\nUse after free when server is disconnected during netsplits.\n\t Found by Joseph Bisch.\nUse after free when SASL messages are received in unexpected order.\n\t Found by Joseph Bisch.\nNull pointer dereference when an \u00e2\u0080\u009cempty\u00e2\u0080\u009d nick has been observed by\n\t Irssi. Found by Joseph Bisch.\nWhen the number of windows exceed the available space, Irssi would\n\t crash due to Null pointer dereference. Found by Joseph Bisch.\nCertain nick names could result in out of bounds access when printing\n\t theme strings. Found by Oss-Fuzz.\n\n", "edition": 6, "modified": "2018-02-22T00:00:00", "published": "2018-02-15T00:00:00", "id": "7AFC5E56-156D-11E8-95F2-005056925DB4", "href": "https://vuxml.freebsd.org/freebsd/7afc5e56-156d-11e8-95f2-005056925db4.html", "title": "irssi -- multiple vulnerabilities", "type": "freebsd", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "ubuntu": [{"lastseen": "2020-07-02T11:43:32", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-7052"], "description": "It was discovered that Irssi incorrectly handled certain empty \nnick names. An attacker could possibly use this issue to cause a denial \nof service. (CVE-2018-7050)\n\nIt was discovered that Irssi incorrectly handled certain nick names. \nAn attacker could possibly use this to access sensitive information. \n(CVE-2018-7051)\n\nIt was discovered that Irssi incorrectly handled an increase in the \nnumber of windows. An attacker could possibly use this issue to cause \na denial of service. (CVE-2018-7052)\n\nIt was discovered that Irssi incorrectly handled certain messages. \nAn attacker could possibly use this issue to cause a denial of service \nor execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and \nUbuntu 17.10. (CVE-2018-7053)\n\nIt was discovered that Irssi incorrectly handled certain disconnections. \nAn attacker could possibly use this to cause a denial of service or \nexecute arbitrary code. This issue only affected Ubuntu 17.10. (CVE-2018-7054)", "edition": 11, "modified": "2018-03-06T00:00:00", "published": "2018-03-06T00:00:00", "id": "USN-3590-1", "href": "https://ubuntu.com/security/notices/USN-3590-1", "title": "Irssi vulnerabilities", "type": "ubuntu", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2020-07-02T11:40:18", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7054", "CVE-2019-13045"], "description": "It was discovered that Irssi incorrectly handled certain disconnections. \nAn attacker could possibly use this issue to cause a denial of service \nor execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. \n(CVE-2018-7054)\n\nIt was discovered that Irssi incorrectly handled certain requests. \nAn attacker could possibly use this issue to cause a denial of service \nor execute arbitrary code. (CVE-2019-13045)", "edition": 2, "modified": "2019-07-04T00:00:00", "published": "2019-07-04T00:00:00", "id": "USN-4046-1", "href": "https://ubuntu.com/security/notices/USN-4046-1", "title": "Irssi vulnerabilities", "type": "ubuntu", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2021-02-02T06:52:41", "description": "An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an \"empty\" nick.", "edition": 6, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-02-15T20:29:00", "title": "CVE-2018-7050", "type": "cve", "cwe": ["CWE-476"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7050"], "modified": "2019-02-28T18:39:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/a:irssi:irssi:1.1.0", "cpe:/o:canonical:ubuntu_linux:14.04", "cpe:/o:debian:debian_linux:9.0"], "id": "CVE-2018-7050", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7050", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:a:irssi:irssi:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:52:41", "description": "An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.", "edition": 7, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-02-15T20:29:00", "title": "CVE-2018-7054", "type": "cve", "cwe": ["CWE-416"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7054"], "modified": "2019-07-04T21:15:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/a:irssi:irssi:1.1.0", "cpe:/o:canonical:ubuntu_linux:14.04", "cpe:/o:debian:debian_linux:9.0"], "id": "CVE-2018-7054", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7054", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:a:irssi:irssi:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:52:41", "description": "An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.", "edition": 6, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-02-15T20:29:00", "title": "CVE-2018-7051", "type": "cve", "cwe": ["CWE-125"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": true, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7051"], "modified": "2019-02-28T18:39:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/a:irssi:irssi:1.1.0", "cpe:/o:debian:debian_linux:7.0", "cpe:/o:canonical:ubuntu_linux:14.04", "cpe:/o:debian:debian_linux:9.0"], "id": "CVE-2018-7051", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7051", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:a:irssi:irssi:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:52:41", "description": "An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.", "edition": 6, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 9.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-02-15T20:29:00", "title": "CVE-2018-7053", "type": "cve", "cwe": ["CWE-416"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7053"], "modified": "2019-02-28T17:37:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/a:irssi:irssi:1.1.0", "cpe:/o:canonical:ubuntu_linux:14.04", "cpe:/o:debian:debian_linux:9.0"], "id": "CVE-2018-7053", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7053", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:a:irssi:irssi:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}, {"lastseen": "2021-02-02T06:52:41", "description": "An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.", "edition": 6, "cvss3": {"exploitabilityScore": 3.9, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "NONE", "baseScore": 7.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "userInteraction": "NONE", "version": "3.0"}, "impactScore": 3.6}, "published": "2018-02-15T20:29:00", "title": "CVE-2018-7052", "type": "cve", "cwe": ["CWE-476"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "NONE", "baseScore": 5.0, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-7052"], "modified": "2019-02-28T17:37:00", "cpe": ["cpe:/o:canonical:ubuntu_linux:17.10", "cpe:/o:canonical:ubuntu_linux:16.04", "cpe:/a:irssi:irssi:1.1.0", "cpe:/o:canonical:ubuntu_linux:14.04", "cpe:/o:debian:debian_linux:9.0"], "id": "CVE-2018-7052", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7052", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}, "cpe23": ["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:a:irssi:irssi:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"]}], "slackware": [{"lastseen": "2020-10-25T16:36:22", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7050", "CVE-2018-7051", "CVE-2018-7052", "CVE-2018-7053", "CVE-2018-7054", "CVE-2019-5882"], "description": "New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to\nfix security issues.\n\n\nHere are the details from the Slackware 14.2 ChangeLog:\n\npatches/packages/irssi-1.1.2-i586-1_slack14.2.txz: Upgraded.\n This update addresses bugs including security and stability issues:\n A NULL pointer dereference occurs for an \"empty\" nick.\n Certain nick names could result in out-of-bounds access when printing\n theme strings.\n Crash due to a NULL pointer dereference w hen the number of windows\n exceeds the available space.\n Use-after-free when SASL messages are received in an unexpected order.\n Use-after-free when a server is disconnected during netsplits.\n Use-after-free when hidden lines were expired from the scroll buffer.\n For more information, see:\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7050\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7051\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7052\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7053\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7054\n https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5882\n (* Security fix *)\n\nWhere to find the new packages:\n\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\n\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\n\nUpdated package for Slackware 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/irssi-1.1.2-i486-1_slack14.0.txz\n\nUpdated package for Slackware x86_64 14.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/irssi-1.1.2-x86_64-1_slack14.0.txz\n\nUpdated package for Slackware 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/irssi-1.1.2-i486-1_slack14.1.txz\n\nUpdated package for Slackware x86_64 14.1:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/irssi-1.1.2-x86_64-1_slack14.1.txz\n\nUpdated package for Slackware 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/irssi-1.1.2-i586-1_slack14.2.txz\n\nUpdated package for Slackware x86_64 14.2:\nftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/irssi-1.1.2-x86_64-1_slack14.2.txz\n\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/irssi-1.1.2-i586-1.txz\n\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/irssi-1.1.2-x86_64-1.txz\n\n\nMD5 signatures:\n\nSlackware 14.0 package:\n118b1b29671bdc6baf5395e6f61a01cb irssi-1.1.2-i486-1_slack14.0.txz\n\nSlackware x86_64 14.0 package:\n64ba78a75fc90f87a07d46dc83401ec3 irssi-1.1.2-x86_64-1_slack14.0.txz\n\nSlackware 14.1 package:\n4041a1c4e5c085cfb3620bf96060fe86 irssi-1.1.2-i486-1_slack14.1.txz\n\nSlackware x86_64 14.1 package:\n1c0e906da9e4b661296f568239ed9cd9 irssi-1.1.2-x86_64-1_slack14.1.txz\n\nSlackware 14.2 package:\nf0b3aaad26e6f973d02d4787ecc55d36 irssi-1.1.2-i586-1_slack14.2.txz\n\nSlackware x86_64 14.2 package:\nde513f411e82498d0e8a5ee928f67fcc irssi-1.1.2-x86_64-1_slack14.2.txz\n\nSlackware -current package:\n2305420644a7a6f787616ddb14f9249a n/irssi-1.1.2-i586-1.txz\n\nSlackware x86_64 -current package:\n2b657957f83393f58e729442cee236a9 n/irssi-1.1.2-x86_64-1.txz\n\n\nInstallation instructions:\n\nUpgrade the package as root:\n > upgradepkg irssi-1.1.2-i586-1_slack14.2.txz", "modified": "2019-01-11T22:09:47", "published": "2019-01-11T22:09:47", "id": "SSA-2019-011-01", "href": "http://www.slackware.com/security/viewer.php?l=slackware-security&y=2019&m=slackware-security.478665", "type": "slackware", "title": "[slackware-security] irssi", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}], "debian": [{"lastseen": "2019-05-30T02:21:22", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-7052"], "description": "Package : irssi\nVersion : 0.8.15-5+deb7u5\nCVE IDs : CVE-2018-7050 CVE-2018-7051 CVE-2018-7052\nDebian Bugs : #890676, #890677, #890678\n\nIt was discovered that there where a number of vulnerabilities in irssi,\nthe terminal based IRC client:\n \n - CVE-2018-7050: Null pointer dereference for an &quot;empty&quot; nick.\n\n - CVE-2018-7051: Certain nick names could result in out-of-bounds\n access when printing theme strings.\n\n - CVE-2018-7052: When the number of windows exceeds the available space, a\n crash could occur due to another NULL pointer dereference.\n\nFor Debian 7 &quot;Wheezy&quot;, these issues have been fixed in irssi version\n0.8.15-5+deb7u5.\n\nWe recommend that you upgrade your irssi packages.\n\n\nRegards,\n\n- -- \n ,&#x27;&#x27;`.\n : :&#x27; : Chris Lamb\n `. `&#x27;` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 3, "modified": "2018-02-22T22:09:03", "published": "2018-02-22T22:09:03", "id": "DEBIAN:DLA-1289-1:D6F9D", "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201802/msg00024.html", "title": "[SECURITY] [DLA 1289-1] irssi security update", "type": "debian", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P"}}, {"lastseen": "2020-08-12T00:52:22", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7051", "CVE-2018-7050", "CVE-2018-5205", "CVE-2018-5206", "CVE-2018-5207", "CVE-2018-7054", "CVE-2018-7053", "CVE-2018-5208", "CVE-2018-7052"], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-4162-1 security@debian.org\nhttps://www.debian.org/security/ Moritz Muehlenhoff\nApril 01, 2018 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : irssi\nCVE ID : CVE-2018-5205 CVE-2018-5206 CVE-2018-5207 CVE-2018-5208 \n CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 CVE-2018-7053 \n CVE-2018-7054\n\nMultiple vulnerabilities have been discovered in Irssi, a terminal-based\nIRC client which can result in denial of service.\n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 1.0.7-1~deb9u1.\n\nWe recommend that you upgrade your irssi packages.\n\nFor the detailed security status of irssi please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/irssi\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 8, "modified": "2018-04-01T20:31:12", "published": "2018-04-01T20:31:12", "id": "DEBIAN:DSA-4162-1:6AB47", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2018/msg00088.html", "title": "[SECURITY] [DSA 4162-1] irssi security update", "type": "debian", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-30T02:22:46", "bulletinFamily": "unix", "cvelist": ["CVE-2018-7051"], "description": "Package : irssi\nVersion : 0.8.15-5+deb7u6\nCVE ID : CVE-2018-7051\nDebian Bug : #890677\n\nIt was discovered that there was an issue in the irssi IRC client where\ncertain nick names could result in out-of-bounds access when printing\ntheme strings.\n\nFor Debian 7 &quot;Wheezy&quot;, this issue has been fixed in irssi version\n0.8.15-5+deb7u6. It was incorrectly missing from the upload of\n0.8.15-5+deb7u5 announced as part of DLA-1289-1. Thanks to Ben Hutchings\nand Matus Uhlhar.\n\nWe recommend that you upgrade your irssi packages.\n\n\nRegards,\n\n- -- \n ,&#x27;&#x27;`.\n : :&#x27; : Chris Lamb\n `. `&#x27;` lamby@debian.org / chris-lamb.co.uk\n `-\n\n", "edition": 3, "modified": "2018-03-26T15:53:14", "published": "2018-03-26T15:53:14", "id": "DEBIAN:DLA-1318-1:41484", "href": "https://lists.debian.org/debian-lts-announce/2018/debian-lts-announce-201803/msg00021.html", "title": "[SECURITY] [DLA 1318-1] irssi security update", "type": "debian", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}}]}