Memory corruption in Irssi - CVE-2017-9469
Published: June 7, 2017 / Updated: July 1, 2019
Vulnerability identifier: #VU6955
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-9469
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to out-of-bounds memory error. A remote attacker can send specially crafted incorrectly quoted DCC files and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
The weakness exists due to out-of-bounds memory error. A remote attacker can send specially crafted incorrectly quoted DCC files and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
Affected software
Irssi
Arch Linux
Debian Linux
Slackware Linux
Ubuntu
Fedora
irssi (Alpine package)
irssi
Arch Linux
Debian Linux
Slackware Linux
Ubuntu
Fedora
irssi (Alpine package)
irssi
How to mitigate CVE-2017-9469
Update to version 1.0.3.
irssi (Alpine package) - update to 1.0.3-r0
irssi - addressed in versions 1.0.3-1.fc24, 1.0.3-1.fc25, 1.0.3-1.fc26
irssi - addressed in versions 1.0.3-1.fc24, 1.0.3-1.fc25, 1.0.3-1.fc26