Summary
It was discovered that Irssi incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service
or to execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | irssi | 0.8.15-5ubuntu3.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | irssi | 0.8.19-1ubuntu1.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | irssi | 1.0.5-1ubuntu4.1 |
Vulnerabilities 1
-
Unscored —
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
References
-
report
https://ubuntu.com/security/CVE-2019-5882