CVE-2017-5196

HIGH 7.5CVE-2017-5196 · Published 03/03/2017 · updated 17/06/2026

In short

CVE-2017-5196 is a HIGH (CVSS 7.5) vulnerability affecting irssi (irssi).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.3% of all vulnerabilities.
Fix: update to 0.8.21 or later.

Package	Affected versions	Patched versions
irssi irssi	`≥ 0.8.18, < 0.8.21`	`0.8.21`

Description

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.

References

openwall.com/lists/oss-security/2017/01/06/1 · Mailing List
securityfocus.com/bid/95310 · Third Party Advisory
irssi.org/security/irssi_sa_2017_01.txt · Patch
security.gentoo.org/glsa/201701-45 · Third Party Advisory

More vulnerabilities in irssi

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

irssi

≥ 0.8.18, < 0.8.21

0.8.21

More vulnerabilities in irssi

See all →