Irssi: Security Vulnerabilities
Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-04-14
The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System using the irssi docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
CVSS Score
9.8
EPSS Score
0.021
Published
2020-12-08
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
CVSS Score
9.8
EPSS Score
0.008
Published
2019-08-29
Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.
CVSS Score
8.1
EPSS Score
0.06
Published
2019-06-29
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
CVSS Score
9.8
EPSS Score
0.006
Published
2019-01-09
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" nick.
CVSS Score
7.5
EPSS Score
0.011
Published
2018-02-15
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds access when printing theme strings.
CVSS Score
7.5
EPSS Score
0.007
Published
2018-02-15
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur.
CVSS Score
7.5
EPSS Score
0.011
Published
2018-02-15
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.
CVSS Score
9.8
EPSS Score
0.009
Published
2018-02-15
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191.
CVSS Score
9.8
EPSS Score
0.008
Published
2018-02-15
Page 1