IR
Vendor
Irssi
43
CVEs
0
On KEV
0
New 30D
Products
IR9.8
Irssi
Irssi
41 CVEs0 on KEV0 new
BU3.3
Buf.pl
Irssi
1 CVEs0 on KEV0 new
DI9.8
Docker Image
Irssi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-29132 | IR Irssi Irssi | 5.3 | Apr 14 | Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference |
| CVE-2020-29602 | DI Docker Image Irssi | 9.8 | Dec 8 | The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user |
| CVE-2019-15717 | IR Irssi Irssi | 9.8 | Aug 29 | Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP |
| CVE-2019-13045 | IR Irssi Irssi | 8.1 | Jun 29 | Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server |
| CVE-2019-5882 | IR Irssi Irssi | 9.8 | Jan 9 | Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer |
| CVE-2018-7054 | IR Irssi Irssi | 9.8 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 |
| CVE-2018-7053 | IR Irssi Irssi | 9.8 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 |
| CVE-2018-7052 | IR Irssi Irssi | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 |
| CVE-2018-7051 | IR Irssi Irssi | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 |
| CVE-2018-7050 | IR Irssi Irssi | 7.5 | Feb 15 | An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1 |
| CVE-2018-5208 | IR Irssi Irssi | 9.8 | Jan 6 | In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings |
| CVE-2018-5207 | IR Irssi Irssi | 7.5 | Jan 6 | When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string |
| CVE-2018-5206 | IR Irssi Irssi | 9.8 | Jan 6 | When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer |
| CVE-2018-5205 | IR Irssi Irssi | 7.5 | Jan 6 | When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string |
| CVE-2017-15723 | IR Irssi Irssi | 7.5 | Oct 22 | In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message |
| CVE-2017-15722 | IR Irssi Irssi | 5.9 | Oct 22 | In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string |
| CVE-2017-15721 | IR Irssi Irssi | 7.5 | Oct 22 | In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference |
| CVE-2017-15228 | IR Irssi Irssi | 7.5 | Oct 22 | Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string |
| CVE-2017-15227 | IR Irssi Irssi | 7.5 | Oct 22 | Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions… |
| CVE-2017-10966 | IR Irssi Irssi | 9.8 | Jul 7 | An issue was discovered in Irssi before 1.0.4 |
| CVE-2017-10965 | IR Irssi Irssi | 9.8 | Jul 7 | An issue was discovered in Irssi before 1.0.4 |
| CVE-2017-9469 | IR Irssi Irssi | 7.5 | Jun 7 | In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory |
| CVE-2017-9468 | IR Irssi Irssi | 7.5 | Jun 7 | In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer |
| CVE-2017-7191 | IR Irssi Irssi | 9.8 | Mar 27 | The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors |
| CVE-2017-5356 | IR Irssi Irssi | 7.5 | Mar 3 | Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing… |
| CVE-2017-5196 | IR Irssi Irssi | 7.5 | Mar 3 | Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8 |
| CVE-2017-5195 | IR Irssi Irssi | 7.5 | Mar 3 | Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code |
| CVE-2017-5194 | IR Irssi Irssi | 7.5 | Mar 3 | Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message |
| CVE-2017-5193 | IR Irssi Irssi | 7.5 | Mar 3 | The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick |
| CVE-2016-7553 | BU Buf.pl Irssi | 3.3 | Feb 27 | The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain… |
| CVE-2016-7045 | IR Irssi Irssi | 7.5 | Sep 27 | The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors… |
| CVE-2016-7044 | IR Irssi Irssi | 7.5 | Sep 27 | The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service… |
| CVE-2010-1156 | IR Irssi Irssi | – | Apr 16 | core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted… |
| CVE-2010-1155 | IR Irssi Irssi | – | Apr 16 | Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field… |
| CVE-2009-1959 | IR Irssi Irssi | – | Jun 8 | Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command,… |
| CVE-2007-4397 | IR Irssi Irssi | – | Aug 18 | Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1.07, (3) Disrok 1.0, (4) a2x 0.0.1, (5) Another xmms-info script 1.0, (6) XChat-XMMS… |
| CVE-2007-4399 | IR Irssi Irssi | – | Aug 18 | CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the… |
| CVE-2007-4398 | IR Irssi Irssi | – | Aug 18 | Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands… |
| CVE-2007-4396 | IR Irssi Irssi | – | Aug 18 | Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7)… |
| CVE-2006-0458 | IR Irssi Irssi | – | Mar 6 | The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distributions, allows remote attackers to cause a denial of service… |
| CVE-2003-1020 | IR Irssi Irssi | – | Jan 5 | The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash) |
| CVE-2002-1840 | IR Irssi Irssi | – | Dec 31 | irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system |
| CVE-2002-0983 | IR Irssi Irssi | – | Sep 24 | IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC channel that has a long topic followed by a certain string,… |