Vulnerability in irssi - security update
Summary
DLA-1088-1: irssi - security update. Affects irssi versions < 0.8.15-5+deb7u2. Fixed in 0.8.15-5+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
irssi is a popular IRC client used for connecting to IRC networks and participating in chat rooms. It is widely used by individuals and organizations for communication purposes. However, a security vulnerability has been discovered in irssi that could potentially allow remote attackers to cause a crash.
Vulnerability Detail
The vulnerability, identified as CVE-2017-9468 and CVE-2017-9469, affects irssi versions prior to 0.8.15-5+deb7u2. In the first vulnerability (CVE-2017-9468), when irssi receives a DCC message without a source nick/host, it attempts to dereference a NULL pointer, leading to a crash. The second vulnerability (CVE-2017-9469) occurs when irssi receives certain incorrectly quoted DCC files, causing it to search for the terminating quote one byte before the allocated memory, potentially resulting in a crash or other unpredictable behavior.
How To Fix
Minimum fixed version
0.8.15-5+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade irssiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, irssi versions prior to 0.8.15-5+deb7u2 are vulnerable to two security issues. These vulnerabilities can potentially be exploited by remote attackers to crash the application. To mitigate these risks, it is crucial to upgrade irssi to the recommended version. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for irssi →
FAQ
irssi is an IRC client used for connecting to IRC networks and participating in chat rooms. It provides a command-line interface and is highly customizable.
These vulnerabilities could allow remote attackers to crash the irssi application, potentially causing denial of service or other unpredictable behavior.
Versions of irssi prior to 0.8.15-5+deb7u2 are affected by these vulnerabilities.
To fix these vulnerabilities, you should upgrade your irssi packages to version 0.8.15-5+deb7u2 or later. Follow the instructions provided by the Debian LTS security advisories documentation.
No specific workaround has been mentioned for these vulnerabilities. It is recommended to apply the security update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for irssi.
