IR
Product
Irssi
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 19Medium 2Low 0
Watch
Add Irssi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13045 | 8.1 | Jun 29 | Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server Affected: 0.8.18 before 1.0.8; 1.1.0 before 1.1.3; 1.2.0 before 1.2.1 |
| CVE-2018-7052 | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 Affected: before 1.0.7; 1.1.0 |
| CVE-2018-7051 | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 Affected: before 1.0.7; 1.1.0 |
| CVE-2018-7050 | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 Affected: before 1.0.7; 1.1.0 |
| CVE-2018-5207 | 7.5 | Jan 6 | When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string Affected: before 1.0.6 |
| CVE-2018-5205 | 7.5 | Jan 6 | When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string Affected: before 1.0.6 |
| CVE-2017-15723 | 7.5 | Oct 22 | In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message Affected: through 1.0.4 |
| CVE-2017-15721 | 7.5 | Oct 22 | In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference Affected: through 1.0.4 |
| CVE-2017-15228 | 7.5 | Oct 22 | Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string Affected: through 1.0.4 |
| CVE-2017-15227 | 7.5 | Oct 22 | Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions… Affected: through 1.0.4 |
| CVE-2017-9469 | 7.5 | Jun 7 | In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory Affected: through 1.0.2 |
| CVE-2017-9468 | 7.5 | Jun 7 | In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer Affected: through 1.0.2 |
| CVE-2017-5356 | 7.5 | Mar 3 | Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing… Affected: before 0.8.21 |
| CVE-2017-5196 | 7.5 | Mar 3 | Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8 Affected: 0.8.18 before 0.8.21 |
| CVE-2017-5195 | 7.5 | Mar 3 | Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code Affected: 0.8.17 before 0.8.21 |
| CVE-2017-5194 | 7.5 | Mar 3 | Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message Affected: before 0.8.21 |
| CVE-2017-5193 | 7.5 | Mar 3 | The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick Affected: before 0.8.21 |
| CVE-2016-7045 | 7.5 | Sep 27 | The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors… Affected: through 0.8.19 |
| CVE-2016-7044 | 7.5 | Sep 27 | The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service… Affected: through 0.8.19 |
Showing 19