CVEブラウザに戻る

CVE-2017-10965

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1030%

EPSS Percentile14.59th

Published2017年7月7日

Last Modified2026年5月13日

Vulnerability Description

An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer.

Affected Platforms (CPE)

📦

Irssi

Irssi

<= 1.0.3

References & Advisories

🔗 https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291

🔗 https://irssi.org/security/irssi_sa_2017_07.txt

🔗 https://www.debian.org/security/2017/dsa-4016

🔗 https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291

🔗 https://irssi.org/security/irssi_sa_2017_07.txt

🔗 https://www.debian.org/security/2017/dsa-4016

関連する脆弱性情報

CVE-2002-184010.0

irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remo...

CVE-2017-109669.8

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable i...

CVE-2018-52069.8

When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.

CVE-2018-52089.8

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strin...