Summary
Gabriel Campana and Adrien Guinet discovered that the format parsing code
in Irssi did not properly verify 24bit color codes. A remote attacker could
use this to cause a denial of service (application crash). (CVE-2016-7044)
Gabriel Campana and Adrien Guinet discovered that a buffer overflow existed
in the format parsing code in Irssi. A remote attacker could use this to
cause a denial of service (application crash). (CVE-2016-7045)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | irssi | 0.8.19-1ubuntu1.2 |
Vulnerabilities 2
-
Unscored —
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enab…
-
Unscored —
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a de…