Summary
It was discovered that Irssi incorrectly handled certain DCC messages. A
malicious IRC server could use this issue to cause Irssi to crash,
resulting in a denial of service. (CVE-2017-9468)
Joseph Bisch discovered that Irssi incorrectly handled receiving
incorrectly quoted DCC files. A remote attacker could possibly use this
issue to cause Irssi to crash, resulting in a denial of service.
(CVE-2017-9469)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | irssi | 0.8.15-5ubuntu3.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | irssi | 0.8.19-1ubuntu1.4 |
Vulnerabilities 2
-
Unscored —
In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer…
-
Unscored —
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one …