CVE-2018-7054

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.

Null pointer dereference when an "empty" nick has been observed by Irssi (CVE-2018-7050).

Certain nick names could result in out of bounds access when printing theme strings (CVE-2018-7051).

When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference (CVE-2018-7052).

Use after free when SASL messages are received in unexpected order (CVE-2018-7053).

Use after free when server is disconnected during netsplits (CVE-2018-7054).

This update for irssi fixes the following security issues:

• CVE-2018-7054: Use after free when server is disconnected during netsplits
• CVE-2018-7053: Use after free when SASL messages are received in unexpected order
• CVE-2018-7050: Null pointer dereference when an 'empty' nick has been observed
• CVE-2018-7052: When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference
• CVE-2018-7051: Certain nick names could result in out of bounds access when printing theme strings

This update for irssi fixes the following security issues:

• CVE-2018-7054: Use after free when server is disconnected during netsplits
• CVE-2018-7053: Use after free when SASL messages are received in unexpected order
• CVE-2018-7050: Null pointer dereference when an 'empty' nick has been observed
• CVE-2018-7052: When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference
• CVE-2018-7051: Certain nick names could result in out of bounds access when printing theme strings

These are all security issues fixed in the irssi-1.2.3-2.4 package on the GA media of openSUSE Tumbleweed.

It was discovered that Irssi incorrectly handled certain empty nick names. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-7050)

It was discovered that Irssi incorrectly handled certain nick names. An attacker could possibly use this to access sensitive information. (CVE-2018-7051)

It was discovered that Irssi incorrectly handled an increase in the number of windows. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-7052)

It was discovered that Irssi incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-7053)

It was discovered that Irssi incorrectly handled certain disconnections. An attacker could possibly use this to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 17.10. (CVE-2018-7054)

It was discovered that Irssi incorrectly handled certain disconnections. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-7054)

It was discovered that Irssi incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2019-13045)