{"id":"CVE-2016-7553","aliases":["DEBIAN-CVE-2016-7553","DLA-722-1","EUVD-2016-8406","GHSA-6fh2-w324-phpv","MGASA-2016-0384","SUSE-SU-2016:2524-1","UBUNTU-CVE-2016-7553","USN-3184-1","openSUSE-SU-2016:2524-1","openSUSE-SU-2024:10455-1"],"status":"published","title":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer...","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0039,"percentile":0.33435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-275"],"published":"2016-09-27T00:00:00Z","modified":"2026-10-20T10:47:57Z","fixes":[{"ecosystem":"Debian:12","package":"irssi","fixed_in":["0.8.20-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"irssi","fixed_in":["0.8.20-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"irssi","fixed_in":["0.8.20-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"irssi","fixed_in":["0.8.15-5+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"irssi","fixed_in":["0.8.20-1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"irssi","fixed_in":["0.8.15-5ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"irssi","fixed_in":["0.8.19-1ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.15-5+deb7u1"}]}],"versions":["0.8.15-5"]},{"source":"osv","ecosystem":"Mageia:5","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.15-5ubuntu3.1"}]}],"versions":["0.8.15-5ubuntu2","0.8.15-5ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.3"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.15-5ubuntu3.1"}]}],"versions":["0.8.15-5ubuntu2","0.8.15-5ubuntu3"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.3"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-3.1"}]}],"bundled":6}],"products":[{"vendor":"irssi","product":"buf.pl"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/09/26/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/24/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","fix","report"]},{"url":"https://irssi.org/security/buf_pl_sa_2016.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/93155","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7553"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ"},{"url":"https://github.com/advisories/GHSA-6fh2-w324-phpv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7553","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0384.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19458","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3WUJ5QGF7IUNO3MJE76PYJHMHXYMAGNU/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162524-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001215","tags":["report"]},{"url":"https://bugzilla.suse.com/999199","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7553","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-7553","tags":["report"]},{"url":"https://irssi.org/2016/09/22/buf.pl-update/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3184-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7553","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5356","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1155","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7553","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2017-02-27T22:00:00Z","modified":"2024-08-06T02:04:55.277Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-8406","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2017-02-27T22:00:00Z","modified":"2024-08-06T02:04:55Z","updated_at":"2026-11-03T02:22:32.403524Z"}],"ghsa":[{"id":"GHSA-6fh2-w324-phpv","title":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer...","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2022-05-17T02:55:24Z","modified":"2025-04-20T03:34:28Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:01:41.934315Z"}],"nvd":[{"id":"CVE-2016-7553","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2017-02-27T22:59:00.48Z","modified":"2026-06-17T00:53:14.437Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-275"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-7553","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2017-02-27T22:59:00.48Z","modified":"2026-10-20T10:47:57.570784236Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"DEBIAN-CVE-2016-7553","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2017-02-27T22:59:00.48Z","modified":"2026-09-22T07:02:14.766564584Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"UBUNTU-CVE-2016-7553","description":"The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.","status":"published","published":"2016-09-27T00:00:00Z","modified":"2026-04-22T10:58:32.731868Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-722-1","title":"irssi - security update","status":"published","published":"2016-11-25T00:00:00Z","modified":"2026-03-09T02:10:21.161375Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2016-0384","title":"Updated irssi packages fix security vulnerability","description":"An information disclosure vulnerability was found in the buf.pl core\nscript for irssi. Other users on the same machine may be able to retrieve\nthe whole window contents after /UPGRADE when the buf.pl script is loaded.\nFurthermore, this dump of the windows contents is never removed afterwards\n(CVE-2016-7553).\n","status":"published","published":"2016-11-17T23:40:52Z","modified":"2026-04-16T06:23:11.924899758Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2016:2524-1","title":"Security update for irssi","description":"The IRC client irssi was updated to 0.8.20, fixing various bugs and security issues.\n\n* CVE-2016-7044: The unformat_24bit_color function in the format parsing\n  code in Irssi, when compiled with true-color enabled, allowed remote\n  attackers to cause a denial of service (heap corruption and crash)\n  via an incomplete 24bit color code.\n* CVE-2016-7045: The format_send_to_gui function in the format parsing\n  code in Irssi allowed remote attackers to cause a denial of service\n  (heap corruption and crash) via vectors involving the length of a string.\n\nSee https://irssi.org/security/irssi_sa_2016.txt for more details.\n\n* CVE-2016-7553: A information disclosure vulnerability in irssi buf.pl\n\nSee https://irssi.org/2016/09/22/buf.pl-update/ for more information.\n  ","status":"published","published":"2016-10-07T13:29:02Z","modified":"2026-02-04T02:37:34.571921Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10455-1","title":"irssi-0.8.20-3.1 on GA media","description":"These are all security issues fixed in the irssi-0.8.20-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:38:50.308463Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:2524-1","title":"Security update for irssi","description":"The IRC client irssi was updated to 0.8.20, fixing various bugs and security issues.\n\n* CVE-2016-7044: The unformat_24bit_color function in the format parsing\n  code in Irssi, when compiled with true-color enabled, allowed remote\n  attackers to cause a denial of service (heap corruption and crash)\n  via an incomplete 24bit color code.\n* CVE-2016-7045: The format_send_to_gui function in the format parsing\n  code in Irssi allowed remote attackers to cause a denial of service\n  (heap corruption and crash) via vectors involving the length of a string.\n\nSee https://irssi.org/security/irssi_sa_2016.txt for more details.\n\n* CVE-2016-7553: A information disclosure vulnerability in irssi buf.pl\n\nSee https://irssi.org/2016/09/22/buf.pl-update/ for more information.\n  ","status":"published","published":"2016-10-07T13:29:02Z","modified":"2026-02-04T03:33:30.942545Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"USN-3184-1","title":"irssi vulnerabilities","description":"It was discovered that the Irssi buf.pl script set incorrect permissions. A\nlocal attacker could use this issue to retrieve another user's window\ncontents. (CVE-2016-7553)\n\nJoseph Bisch discovered that Irssi incorrectly handled comparing nicks. A\nremote attacker could use this issue to cause Irssi to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2017-5193)\n\nIt was discovered that Irssi incorrectly handled invalid nick messages. A\nremote attacker could use this issue to cause Irssi to crash, resulting in\na denial of service, or possibly execute arbitrary code. (CVE-2017-5194)\n\nJoseph Bisch discovered that Irssi incorrectly handled certain incomplete\ncontrol codes. A remote attacker could use this issue to cause Irssi to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10.\n(CVE-2017-5195)\n\nHanno Böck and Joseph Bisch discovered that Irssi incorrectly handled\ncertain incomplete character sequences. A remote attacker could use this\nissue to cause Irssi to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2017-5196)\n\nHanno Böck discovered that Irssi incorrectly handled certain format\nstrings. A remote attacker could use this issue to cause Irssi to crash,\nresulting in a denial of service. (CVE-2017-5356)\n","status":"published","published":"2017-02-01T18:08:38Z","modified":"2026-04-22T09:31:51.901453Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}