CVE-2017-5356

概要

参考情報

• openwall.com/lists/oss-security/2017/01/12/8 · Mailing List
• openwall.com/lists/oss-security/2017/01/13/2 · Mailing List
• securityfocus.com/bid/96581 · Third Party Advisory
• blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html · Exploit
• irssi.org/security/irssi_sa_2017_01.txt · Patch
• lists.debian.org/debian-lts-announce/2017/12/msg00022.html · Mailing List

irssi のその他の脆弱性

• CVE-2023-29132中 5.3Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of …
• CVE-2019-15717緊急 9.8Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
• CVE-2019-13045高 8.1Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the se…
• CVE-2019-5882緊急 9.8Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
• CVE-2018-7054緊急 9.8An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netspli…