Irssi vulnerabilities

Products

• Irssi 41

Newest

• irssi Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special... CVE-2023-29132 Fix available 5.3 MediumApril 14, 2023
• irssi docker image The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for... CVE-2020-29602 9.8 CriticalDecember 8, 2020
• irssi, canonical ubuntu linux +1 more Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP. CVE-2019-15717 Fix available 9.8 CriticalAugust 29, 2019
• irssi Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use... CVE-2019-13045 Fix available 8.1 HighJune 29, 2019
• irssi, canonical ubuntu linux +1 more Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer. CVE-2019-5882 Fix available 9.8 CriticalJanuary 9, 2019
• irssi, canonical ubuntu linux, debian linux +2 more An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free... CVE-2018-7054 Fix available 9.8 CriticalFebruary 15, 2018
• irssi, canonical ubuntu linux, debian linux +2 more An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free... CVE-2018-7053 Fix available 9.8 CriticalFebruary 15, 2018
• irssi, canonical ubuntu linux, debian linux +2 more An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows... CVE-2018-7052 Fix available 7.5 HighFebruary 15, 2018
• irssi, canonical ubuntu linux, debian linux +2 more An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could... CVE-2018-7051 Fix available 7.5 HighFebruary 15, 2018
• irssi, canonical ubuntu linux, debian linux +2 more An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference... CVE-2018-7050 Fix available 7.5 HighFebruary 15, 2018
• irssi, debian linux +1 more In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer... CVE-2018-5208 Fix available 9.8 CriticalJanuary 6, 2018
• irssi, debian linux +1 more When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of... CVE-2018-5207 Fix available 7.5 HighJanuary 6, 2018
• irssi, debian linux +1 more When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a... CVE-2018-5206 Fix available 9.8 CriticalJanuary 6, 2018
• irssi, canonical ubuntu linux, debian linux +2 more When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string. CVE-2018-5205 Fix available 7.5 HighJanuary 6, 2018
• irssi, debian linux +1 more In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while... CVE-2017-15723 Fix available 7.5 HighOctober 22, 2017
• irssi, debian linux +1 more In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough,... CVE-2017-15722 Fix available 5.9 MediumOctober 22, 2017
• irssi, debian linux +1 more In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer... CVE-2017-15721 Fix available 7.5 HighOctober 22, 2017
• irssi Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may... CVE-2017-15228 Fix available 7.5 HighOctober 22, 2017
• irssi Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove... CVE-2017-15227 Fix available 7.5 HighOctober 22, 2017
• irssi An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could... CVE-2017-10966 Fix available 9.8 CriticalJuly 7, 2017
• irssi An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps,... CVE-2017-10965 Fix available 9.8 CriticalJuly 7, 2017
• irssi, debian linux +1 more In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the... CVE-2017-9469 Fix available 7.5 HighJune 6, 2017
• irssi, debian linux +1 more In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to... CVE-2017-9468 Fix available 7.5 HighJune 6, 2017
• irssi The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service ... CVE-2017-7191 Fix available 9.8 CriticalMarch 27, 2017
• irssi, debian linux +1 more Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and... CVE-2017-5356 Fix available 7.5 HighJanuary 13, 2017
• irssi Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds... CVE-2017-5196 Fix available 7.5 HighJanuary 6, 2017
• irssi Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds... CVE-2017-5195 Fix available 7.5 HighJanuary 6, 2017
• irssi, debian linux +1 more Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of... CVE-2017-5194 Fix available 7.5 HighJanuary 6, 2017
• irssi, debian linux +1 more The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service ... CVE-2017-5193 Fix available 7.5 HighJanuary 6, 2017
• irssi buf.pl The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer... CVE-2016-7553 Fix available 3.3 LowSeptember 27, 2016
• irssi, canonical ubuntu linux, debian linux +2 more The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote... CVE-2016-7045 Fix available 7.5 HighSeptember 21, 2016
• irssi, canonical ubuntu linux, debian linux +2 more The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when... CVE-2016-7044 Fix available 7.5 HighSeptember 21, 2016
• irssi core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL... CVE-2010-1156 Fix available 4.3 MediumApril 16, 2010
• irssi Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain... CVE-2010-1155 Fix available 6.8 MediumApril 16, 2010
• irssi Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13... CVE-2009-1959 Public exploitFix available 5.0 MediumJune 6, 2009
• irssi CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote... CVE-2007-4399 6.8 MediumAugust 18, 2007
• irssi Multiple CRLF injection vulnerabilities in the (1) now-playing.rb and (2) xmms.pl 1.1 scripts for... CVE-2007-4398 Fix available 6.8 MediumAugust 18, 2007
• irssi, kristof korwisi ixmmsa, mikachu l33t xmms music showing script +4 more +6 more Multiple CRLF injection vulnerabilities in (1) xmms-thing 1.0, (2) XMMS Remote Control Script 1... CVE-2007-4397 6.8 MediumAugust 18, 2007
• irssi Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123... CVE-2007-4396 Fix available 9.3 HighAugust 18, 2007
• irssi The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and... CVE-2006-0458 5.0 MediumMarch 6, 2006
• irssi, mandrakesoft mandrake linux +1 more The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to... CVE-2003-1020 5.0 MediumDecember 23, 2003
• irssi irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the... CVE-2002-1840 10.0 HighDecember 31, 2002
• irssi IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service ... CVE-2002-0983 Fix available 5.0 MediumAugust 23, 2002