{"id":"CVE-2018-5208","aliases":["ALPINE-CVE-2018-5208","DEBIAN-CVE-2018-5208","DSA-4162-1","EUVD-2018-16993","GHSA-7xfv-xhfj-92hw","MGASA-2018-0069","UBUNTU-CVE-2018-5208","USN-3527-1","openSUSE-SU-2018:0057-1","openSUSE-SU-2018:0058-1","openSUSE-SU-2024:10865-1"],"status":"published","title":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer...","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02378,"percentile":0.83971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-01-06T00:00:00Z","modified":"2026-11-03T06:31:30Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"irssi","fixed_in":["1.0.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"irssi","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"irssi","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"irssi","fixed_in":["1.0.7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"irssi","fixed_in":["0.8.15-5ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"irssi","fixed_in":["0.8.19-1ubuntu1.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1~deb9u1"}]}],"versions":["1.0.2-1","1.0.2-1+deb9u1","1.0.2-1+deb9u2","1.0.2-1+deb9u3","1.0.3-1","1.0.4-1","1.0.5-1","1.0.7-1~deb9u1~bpo8+1"],"bundled":9},{"source":"osv","ecosystem":"Mageia:5","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.21-1.4.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.15-5ubuntu3.4"}]}],"versions":["0.8.15-5ubuntu2","0.8.15-5ubuntu3","0.8.15-5ubuntu3.1","0.8.15-5ubuntu3.2","0.8.15-5ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.6"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2","0.8.19-1ubuntu1.3","0.8.19-1ubuntu1.4","0.8.19-1ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.15-5ubuntu3.4"}]}],"versions":["0.8.15-5ubuntu2","0.8.15-5ubuntu3","0.8.15-5ubuntu3.1","0.8.15-5ubuntu3.2","0.8.15-5ubuntu3.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.6"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2","0.8.19-1ubuntu1.3","0.8.19-1ubuntu1.4","0.8.19-1ubuntu1.5"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-36.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-36.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-2.4"}]}],"bundled":26}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"irssi","product":"irssi"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4162","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://irssi.org/security/irssi_sa_2018_01.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5208"},{"url":"https://github.com/advisories/GHSA-7xfv-xhfj-92hw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-5208","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5208","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0069.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22328","tags":["report"]},{"url":"https://usn.ubuntu.com/usn/usn-3527-1/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-5208","tags":["report"]},{"url":"https://github.com/irssi/irssi/releases/download/1.0.6/irssi-1.0.5_1.0.6.diff","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3527-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5207","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1074958","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5882","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:00:00Z","modified":"2024-08-05T05:26:47.202Z","updated_at":"2026-11-02T14:35:00.948726Z"}],"euvd":[{"id":"EUVD-2018-16993","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:00:00Z","modified":"2024-08-05T05:26:47Z","updated_at":"2026-11-03T02:40:11.187677Z"}],"ghsa":[{"id":"GHSA-7xfv-xhfj-92hw","title":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer...","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2022-05-14T01:22:27Z","modified":"2023-02-02T05:03:26Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:38.289817Z"}],"nvd":[{"id":"CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:29:00.39Z","modified":"2026-06-17T01:59:50.7Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"ALPINE-CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:29:00.39Z","modified":"2026-11-03T06:31:30.256255672Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:29:00.39Z","modified":"2026-10-24T10:30:20.059687534Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T16:29:00.39Z","modified":"2026-10-23T18:03:06.556835461Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-5208","description":"In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.","status":"published","published":"2018-01-06T00:00:00Z","modified":"2026-04-22T11:58:35.135855Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DSA-4162-1","title":"irssi - security update","status":"published","published":"2018-04-01T00:00:00Z","modified":"2026-03-09T02:09:50.310683Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0069","title":"Updated irssi packages fix security vulnerabilities","description":"Joseph Bisch discovered that Irssi incorrectly handled incomplete escape\ncodes. If a user were tricked into using malformed commands or opening\nmalformed files, an attacker could use this issue to cause Irssi to\ncrash, resulting in a denial of service (CVE-2018-5205).\n\nJoseph Bisch discovered that Irssi incorrectly handled settings the\nchannel topic without specifying a sender. A malicious IRC server could\nuse this issue to cause Irssi to crash, resulting in a denial of service\n(CVE-2018-5206).\n\nJoseph Bisch discovered that Irssi incorrectly handled incomplete\nvariable arguments. If a user were tricked into using malformed commands\nor opening malformed files, an attacker could use this issue to cause\nIrssi to crash, resulting in a denial of service (CVE-2018-5207).\n\nJoseph Bisch discovered that Irssi incorrectly handled completing\ncertain strings. An attacker could use this issue to cause Irssi to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode (CVE-2018-5208).\n","status":"published","published":"2018-01-12T19:49:32Z","modified":"2026-04-16T06:26:20.196227859Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2018:0057-1","title":"Security update for irssi","description":"This update for irssi to version 1.0.6 fixes several issues that may affect the stability of irssi:\n\n- CVE-2018-5205: Data access beyond the end of the string when using incomplete escape codes\n- CVE-2018-5206: NULL pointer dereference when the channel topic is set without specifying a sender\n- CVE-2018-5207: When using an incomplete variable argument, Irssi may access data beyond the end of the string\n- CVE-2018-5208: Heap buffer overflow when completing certain strings\n","status":"published","published":"2018-01-09T17:57:14Z","modified":"2026-02-04T02:49:49.328673Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:0058-1","title":"Security update for irssi","description":"This update for irssi to version 1.0.6 fixes several issues that may affect the stability of irssi:\n\n- CVE-2018-5205: Data access beyond the end of the string when using incomplete escape codes\n- CVE-2018-5206: NULL pointer dereference when the channel topic is set without specifying a sender\n- CVE-2018-5207: When using an incomplete variable argument, Irssi may access data beyond the end of the string\n- CVE-2018-5208: Heap buffer overflow when completing certain strings\n","status":"published","published":"2018-01-09T17:57:14Z","modified":"2026-02-04T04:26:23.686963Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10865-1","title":"irssi-1.2.3-2.4 on GA media","description":"These are all security issues fixed in the irssi-1.2.3-2.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:28.449384Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-3527-1","title":"irssi vulnerabilities","description":"Joseph Bisch discovered that Irssi incorrectly handled incomplete escape\ncodes. If a user were tricked into using malformed commands or opening\nmalformed files, an attacker could use this issue to cause Irssi to crash,\nresulting in a denial of service. (CVE-2018-5205)\n\nJoseph Bisch discovered that Irssi incorrectly handled settings the channel\ntopic without specifying a sender. A malicious IRC server could use this\nissue to cause Irssi to crash, resulting in a denial of service.\n(CVE-2018-5206)\n\nJoseph Bisch discovered that Irssi incorrectly handled incomplete variable\narguments. If a user were tricked into using malformed commands or opening\nmalformed files, an attacker could use this issue to cause Irssi to crash,\nresulting in a denial of service. (CVE-2018-5207)\n\nJoseph Bisch discovered that Irssi incorrectly handled completing certain\nstrings. An attacker could use this issue to cause Irssi to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2018-5208)\n","status":"published","published":"2018-01-10T13:30:46Z","modified":"2026-04-22T09:42:18.741993Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}