Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1156
HistoryApr 14, 2010 - 12:00 a.m.

CVE-2010-1156

2010-04-1400:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.254

Percentile

96.7%

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a
denial of service (NULL pointer dereference and application crash) via
vectors related to an attempted fuzzy nick match at the instant that a
victim leaves a channel.

Notes

Author Note
jdstrand remotely exploitable, but hard to get timing right
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchirssi< 0.8.12-3ubuntu3.2UNKNOWN
ubuntu8.10noarchirssi< 0.8.12-4ubuntu2.2UNKNOWN
ubuntu9.04noarchirssi< 0.8.12-6ubuntu1.2UNKNOWN
ubuntu9.10noarchirssi< 0.8.14-1ubuntu1.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.254

Percentile

96.7%