{"id":"CVE-2019-13045","aliases":["ALPINE-CVE-2019-13045","ALSA-2020:1616","AZL-45354","DEBIAN-CVE-2019-13045","DLA-3025-1","EUVD-2019-4605","GHSA-pwrg-h5j6-7f43","MGASA-2019-0206","RHSA-2020:1616","RLSA-2020:1616","UBUNTU-CVE-2019-13045","USN-4046-1","openSUSE-SU-2019:1690-1","openSUSE-SU-2019:1894-1","openSUSE-SU-2024:10865-1"],"status":"published","title":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use...","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03361,"percentile":0.88801,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2019-06-29T00:00:00Z","modified":"2026-11-03T06:32:34Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"irssi","fixed_in":["1.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"irssi","fixed_in":["1.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"irssi","fixed_in":["1.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"irssi","fixed_in":["1.1.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"irssi","fixed_in":["1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"irssi-devel","fixed_in":["1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"irssi","fixed_in":["1.4.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"irssi","fixed_in":["1.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"irssi","fixed_in":["1.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"irssi","fixed_in":["1.2.1-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"irssi","fixed_in":["1.0.7-1~deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"irssi","fixed_in":["1.0.8-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"irssi","fixed_in":["1.2.1-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi-debuginfo","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi-debugsource","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-debuginfo","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-debugsource","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-devel","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"irssi","fixed_in":["0:1.1.1-3.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"irssi","fixed_in":["0.8.19-1ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"irssi","fixed_in":["1.0.5-1ubuntu4.2"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"irssi","fixed_in":["1.1.3-bp150.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15","package":"irssi","fixed_in":["1.1.3-bp150.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"irssi","fixed_in":["1.1.3-bp150.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"irssi","fixed_in":["1.1.3-bp150.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"irssi","fixed_in":["1.1.3-bp151.3.3.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.18"},{"fixed":"1.1.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"irssi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-1~deb9u2"}]}],"versions":["1.0.2-1","1.0.2-1+deb9u1","1.0.2-1+deb9u2","1.0.2-1+deb9u3","1.0.3-1","1.0.4-1","1.0.5-1","1.0.7-1~deb9u1","1.0.7-1~deb9u1~bpo8+1"]},{"source":"osv","ecosystem":"Mageia:6","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"irssi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"irssi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.9"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2","0.8.19-1ubuntu1.3","0.8.19-1ubuntu1.4","0.8.19-1ubuntu1.5","0.8.19-1ubuntu1.6","0.8.19-1ubuntu1.7","0.8.19-1ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1ubuntu4.2"}]}],"versions":["1.0.4-1ubuntu2","1.0.4-1ubuntu3","1.0.4-1ubuntu4","1.0.5-1ubuntu1","1.0.5-1ubuntu2","1.0.5-1ubuntu3","1.0.5-1ubuntu4","1.0.5-1ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.19-1ubuntu1.9"}]}],"versions":["0.8.17-1ubuntu1","0.8.17-1ubuntu2","0.8.18-1ubuntu1","0.8.19-1ubuntu1","0.8.19-1ubuntu1.2","0.8.19-1ubuntu1.3","0.8.19-1ubuntu1.4","0.8.19-1ubuntu1.5","0.8.19-1ubuntu1.6","0.8.19-1ubuntu1.7","0.8.19-1ubuntu1.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.5-1ubuntu4.2"}]}],"versions":["1.0.4-1ubuntu2","1.0.4-1ubuntu3","1.0.4-1ubuntu4","1.0.5-1ubuntu1","1.0.5-1ubuntu2","1.0.5-1ubuntu3","1.0.5-1ubuntu4","1.0.5-1ubuntu4.1"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-bp150.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-bp150.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-bp150.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-bp150.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3-bp151.3.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"irssi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-2.4"}]}],"bundled":26}],"products":[{"vendor":"irssi","product":"irssi"}],"references":[{"url":"https://github.com/irssi/irssi/commit/d23b0d22cc611e43c88d99192a59f413f951a955","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://irssi.org/security/irssi_sa_2019_06.txt","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/29/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://seclists.org/bugtraq/2019/Jun/41","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/153480/Slackware-Security-Advisory-irssi-Updates.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/108998","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4046-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13045","tags":["web","advisory"]},{"url":"https://usn.ubuntu.com/4046-1"},{"url":"https://github.com/advisories/GHSA-pwrg-h5j6-7f43"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13045","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1616.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-13045","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-13045","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0206.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25025","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1616","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727683","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1616.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-13045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-13045","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1616","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-13045","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4046-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-7054","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B635CI53PV7X25G6YUHK5XSIKJQMOENI/#B635CI53PV7X25G6YUHK5XSIKJQMOENI","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1139802","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13045","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVK76FLKA5C3EEXRESMUSSBVDDZEJ4EZ/#FVK76FLKA5C3EEXRESMUSSBVDDZEJ4EZ","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5882","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T13:58:05Z","modified":"2024-08-04T23:41:10.337Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-4605","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T13:58:05Z","modified":"2024-08-04T23:41:10Z","updated_at":"2026-11-03T02:40:43.860719Z"}],"ghsa":[{"id":"GHSA-pwrg-h5j6-7f43","title":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use...","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2022-05-24T16:49:02Z","modified":"2024-04-04T01:06:51Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:55:55.605227Z"}],"nvd":[{"id":"CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T14:15:09.277Z","modified":"2026-06-17T02:15:57.91Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"ALPINE-CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T14:15:09.277Z","modified":"2026-11-03T06:32:34.923544359Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"AZL-45354","title":"CVE-2019-13045 affecting package irssi for versions less than 1.4.5-1","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T14:15:09Z","modified":"2026-04-21T04:50:26.184722Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T14:15:09.277Z","modified":"2026-10-20T10:52:20.622698881Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T14:15:09.277Z","modified":"2026-09-21T07:02:04.591178235Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHSA-2020:1616","title":"Red Hat Security Advisory: irssi security update","status":"published","published":"2024-09-16T03:13:50Z","modified":"2026-06-26T12:22:04.825323769Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1616","title":"Low: irssi security update","description":"Irssi is a modular IRC client with Perl scripting. \n\nSecurity Fix(es):\n\n* irssi: use after free when sending SASL login to server (CVE-2019-13045)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:56:59Z","modified":"2026-02-04T10:15:07.159423Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-13045","description":"Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.","status":"published","published":"2019-06-29T00:00:00Z","modified":"2026-04-22T12:09:13.117021Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"ALSA-2020:1616","title":"Low: irssi security update","description":"Irssi is a modular IRC client with Perl scripting. \n\nSecurity Fix(es):\n\n* irssi: use after free when sending SASL login to server (CVE-2019-13045)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T08:56:59Z","modified":"2026-10-29T11:00:05.790557566Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"DLA-3025-1","title":"irssi - security update","status":"published","published":"2022-05-26T00:00:00Z","modified":"2026-03-09T01:18:29.615894Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2019-0206","title":"Updated irssi package fixes security vulnerability","description":"Irssi before 1.0.8 and 1.2.x before 1.2.1, when SASL is enabled, has a use\nafter free when sending SASL login to the server (CVE-2019-13045).\n","status":"published","published":"2019-07-10T10:44:10Z","modified":"2026-04-16T04:40:35.078434922Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1690-1","title":"Security update for irssi","description":"This update for irssi fixes the following issues:\n\nirssi was updated to 1.1.3:\n\n  - CVE-2019-13045: Fix a use after free issue when sending the SASL login on\n    (automatic and manual) reconnects (#1055, #1058) (boo#1139802)\n  - Fix regression of #779 where autolog_ignore_targets would\n    not matching itemless windows anymore (#1012, #1013)\n","status":"published","published":"2019-07-02T06:00:31Z","modified":"2026-02-04T04:21:05.232506Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1894-1","title":"Security update for irssi","description":"This update for irssi fixes the following issues:\n\nirssi was updated to 1.1.3:\n\n  - CVE-2019-13045: Fix a use after free issue when sending the SASL login on\n    (automatic and manual) reconnects (#1055, #1058) (boo#1139802)\n  - Fix regression of #779 where autolog_ignore_targets would\n    not matching itemless windows anymore (#1012, #1013)\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2019-08-14T15:32:02Z","modified":"2026-02-04T02:59:06.792359Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10865-1","title":"irssi-1.2.3-2.4 on GA media","description":"These are all security issues fixed in the irssi-1.2.3-2.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:28.449384Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"USN-4046-1","title":"irssi vulnerabilities","description":"It was discovered that Irssi incorrectly handled certain disconnections.\nAn attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-7054)\n\nIt was discovered that Irssi incorrectly handled certain requests.\nAn attacker could possibly use this issue to cause a denial of service\nor execute arbitrary code. (CVE-2019-13045)\n","status":"published","published":"2019-07-04T17:38:02Z","modified":"2026-04-22T09:58:50.07627Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}