Irssi

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Irssi records in CISA KEV

No Irssi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Irssi 41 records MEDIUM Buf.pl 1 record LOW Docker Image 1 record MEDIUM

Records

41 records in Irssi · all components

TI-2017-08049 CVE-2017-10965 · GHSA-54h6-8x6r-vr9v

An issue was discovered in Irssi before 1.0.4.

MEDIUM 48

An issue was discovered in Irssi before 1.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03443 Published 2017-07-07 Will not fix CWE-476

TI-2017-04886 CVE-2017-7191 · GHSA-2qj4-5xjm-32j8

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of…

MEDIUM 48

The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0336 Published 2017-03-27 No fix listed CWE-416

TI-2002-01759 CVE-2002-1840 · GHSA-c25w-grpg-cp6j

irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in…

MEDIUM 48

irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0277 Published 2005-06-28 No fix listed

TI-2019-11799 CVE-2019-15717 · GHSA-gx32-945w-w9x4

Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.

MEDIUM 47

Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02488 Published 2019-08-29 No fix listed CWE-416

TI-2019-04193 CVE-2019-5882 · GHSA-843w-9chm-9mvw

Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.

MEDIUM 47

Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02543 Published 2019-01-09 Fix deferred CWE-416

TI-2018-05119 CVE-2018-7054 · GHSA-9q5h-rr4r-fvxg

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

MEDIUM 47

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02383 Published 2018-02-15 No fix listed CWE-416

TI-2018-05118 CVE-2018-7053 · GHSA-jfgj-q49c-3779

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

MEDIUM 47

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02404 Published 2018-02-15 No fix listed CWE-416

TI-2018-03767 CVE-2018-5208 · GHSA-7xfv-xhfj-92hw

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap…

MEDIUM 47

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02378 Published 2018-01-06 Will not fix CWE-119

TI-2017-08050 CVE-2017-10966 · GHSA-3jw8-77gg-583w

An issue was discovered in Irssi before 1.0.4.

MEDIUM 47

An issue was discovered in Irssi before 1.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02935 Published 2017-07-07 Will not fix CWE-416

TI-2018-03765 CVE-2018-5206 · GHSA-5g28-mmwc-h2cj

When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.

MEDIUM 46

When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02157 Published 2018-01-06 Will not fix CWE-476

TI-2007-04256 CVE-2007-4396 · GHSA-9mxx-w74h-p26c

Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3)…

MEDIUM 44

Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and (7) xmmsinfo.pl 1.1.1.1 scripts for irssi before 0.8.1…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02292 Published 2007-08-18 No fix listed

TI-2017-06877 CVE-2017-9469 · GHSA-4fcw-x547-92cj

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to…

MEDIUM 42

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06084 Published 2017-06-07 Will not fix CWE-119

TI-2019-09769 CVE-2019-13045 · GHSA-pwrg-h5j6-7f43

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has…

MEDIUM 41

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03361 Published 2019-06-29 Fixed CWE-416

TI-2017-03311 CVE-2017-5196 · GHSA-v3m2-h894-2pfw

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service…

MEDIUM 41

Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings that are not UTF8.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05052 Published 2017-03-03 No fix listed CWE-125

TI-2017-03310 CVE-2017-5195 · GHSA-p9h4-9565-9j42

Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service…

MEDIUM 41

Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color code.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05479 Published 2017-03-03 No fix listed CWE-125

TI-2017-03309 CVE-2017-5194 · GHSA-7q2g-6pcx-gchv

Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a…

MEDIUM 41

Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04953 Published 2017-03-03 Will not fix CWE-416

TI-2017-03308 CVE-2017-5193 · GHSA-g4fg-wxpr-x2cj

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of…

MEDIUM 41

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05595 Published 2017-03-03 Will not fix CWE-476

TI-2017-03391 CVE-2017-5356 · GHSA-rxfr-9cmv-jwxm

Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds…

MEDIUM 40

Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04779 Published 2017-03-03 Will not fix CWE-125

TI-2016-06056 CVE-2016-7045 · GHSA-f47r-27qv-728c

The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows…

MEDIUM 40

The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04707 Published 2016-09-27 No fix listed CWE-119

TI-2016-06055 CVE-2016-7044 · GHSA-pcc5-fpf6-mmhc

The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when…

MEDIUM 40

The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomple…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04707 Published 2016-09-27 No fix listed CWE-119

TI-2017-06876 CVE-2017-9468 · GHSA-8366-xqph-v5cf

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts…

LOW 39

In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0366 Published 2017-06-07 Will not fix CWE-476

TI-2018-05116 CVE-2018-7051 · GHSA-82mx-xfmg-73c8

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

LOW 38

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02447 Published 2018-02-15 Will not fix CWE-125

TI-2018-05117 CVE-2018-7052 · GHSA-2r5h-wgv6-m4rv

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

LOW 37

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02307 Published 2018-02-15 Will not fix CWE-476

TI-2018-05115 CVE-2018-7050 · GHSA-96hj-65hm-4xjf

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

LOW 37

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02307 Published 2018-02-15 Will not fix CWE-476

TI-2018-03766 CVE-2018-5207 · GHSA-pmhc-782w-qwjv

When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.

LOW 37

When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01914 Published 2018-01-06 Will not fix CWE-134

Open these records in search →

Critical	12
High	19
Medium	11
Low	1
No CVSS	0