USN-3465-1

Dashboard / Vulnerabilities / USN-3465-1

USN-3465-1

Summary: irssi vulnerabilities

Details: Brian Carpenter discovered that Irssi incorrectly handled messages with invalid time stamps. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-10965) Brian Carpenter discovered that Irssi incorrectly handled the internal nick list. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-10966) Joseph Bisch discovered that Irssi incorrectly removed destroyed channels from the query list. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-15227) Hanno Böck discovered that Irssi incorrectly handled themes. If a user were tricked into using a malicious theme, a attacker could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-15228) Joseph Bisch discovered that Irssi incorrectly handled certain DCC CTCP messages. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-15721) Joseph Bisch discovered that Irssi incorrectly handled certain channel IDs. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-15722) Joseph Bisch discovered that Irssi incorrectly handled certain long nicks or targets. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-15723)

References: https://ubuntu.com/security/notices/USN-3465-1, https://ubuntu.com/security/CVE-2017-10965, https://ubuntu.com/security/CVE-2017-10966, https://ubuntu.com/security/CVE-2017-15227, https://ubuntu.com/security/CVE-2017-15228, https://ubuntu.com/security/CVE-2017-15721, https://ubuntu.com/security/CVE-2017-15722, https://ubuntu.com/security/CVE-2017-15723