CVE-2017-10966
Fixed in a distro release EPSS 3%
An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table.
Products: irssi
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | irssi | 1.0.4-r0 |
| Alpine 3.11 | irssi | 1.0.4-r0 |
| Alpine 3.12 | irssi | 1.0.4-r0 |
| Alpine 3.13 | irssi | 1.0.4-r0 |
| Alpine 3.14 | irssi | 1.0.4-r0 |
| Alpine 3.15 | irssi | 1.0.4-r0 |
| Alpine 3.16 | irssi | 1.0.4-r0 |
| Alpine 3.17 | irssi | 1.0.4-r0 |
| Alpine 3.3 | irssi | 0.8.21.r2 |
| Alpine 3.4 | irssi | 0.8.21.r2 |
| Alpine 3.5 | irssi | 0.8.21.r2 |
| Alpine 3.7 | irssi | 1.0.4-r0 |
| Alpine 3.8 | irssi | 1.0.4-r0 |
| Alpine 3.9 | irssi | 1.0.4-r0 |
| Arch Linux | irssi | 1.0.4-1 |
| Debian 12 | irssi | 1.0.4-1 |
| Debian 13 | irssi | 1.0.4-1 |
| Debian 14 | irssi | 1.0.4-1 |
| Debian 7 | irssi | 0.8.15-5+deb7u3 |
| SUSE Package Hub 12 | irssi | 1.0.4-28.1 |
| Ubuntu 14.04 LTS | irssi | 0.8.15-5ubuntu3.3 |
| Ubuntu 16.04 LTS | irssi | 0.8.19-1ubuntu1.5 |
| openSUSE Tumbleweed | irssi | 1.2.3-2.4 |