CVE-2017-9469
Fixed in a distro release EPSS 6%
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.
Products: irssi, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | irssi | 1.0.3-r0 |
| Alpine 3.11 | irssi | 1.0.3-r0 |
| Alpine 3.12 | irssi | 1.0.3-r0 |
| Alpine 3.13 | irssi | 1.0.3-r0 |
| Alpine 3.14 | irssi | 1.0.3-r0 |
| Alpine 3.15 | irssi | 1.0.3-r0 |
| Alpine 3.16 | irssi | 1.0.3-r0 |
| Alpine 3.17 | irssi | 1.0.3-r0 |
| Alpine 3.6 | irssi | 1.0.3-r0 |
| Alpine 3.7 | irssi | 1.0.3-r0 |
| Alpine 3.8 | irssi | 1.0.3-r0 |
| Alpine 3.9 | irssi | 1.0.3-r0 |
| Arch Linux | irssi | 1.0.3-1 |
| Debian 12 | irssi | 1.0.3-1 |
| Debian 13 | irssi | 1.0.3-1 |
| Debian 14 | irssi | 1.0.3-1 |
| Debian 7 | irssi | 0.8.15-5+deb7u2 |
| Debian 8 | irssi | 0.8.17-1+deb8u4 |
| Debian 9 | irssi | 1.0.2-1+deb9u1 |
| SUSE Package Hub 12 | irssi | 1.0.3-25.1 |
| Ubuntu 14.04 LTS | irssi | 0.8.15-5ubuntu3.2 |
| Ubuntu 16.04 LTS | irssi | 0.8.19-1ubuntu1.4 |
| openSUSE Tumbleweed | irssi | 1.2.3-2.4 |