Use-after-free in Irssi - CVE-2019-15717

Detailed vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing responses from IRC server with a double CAP. A remote attacker can trick the victim to connect to a malicious IRC server, trigger use-after-free error and execute arbitrary code on the target system..

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

How to mitigate CVE-2019-15717

Sources

• http://www.openwall.com/lists/oss-security/2019/08/29/3
• http://www.openwall.com/lists/oss-security/2019/08/29/5
• https://irssi.org/security/irssi_sa_2019_08.txt