返回 CVE 瀏覽器

CVE-2018-5208

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1510%

EPSS Percentile33.26th

Published2018年1月6日

Last Modified2024年11月21日

Vulnerability Description

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.

Affected Platforms (CPE)

📦

Irssi

Irssi

< 1.0.6

💻

Debian

Debian Linux

= 9.0

References & Advisories

🔗 https://irssi.org/security/irssi_sa_2018_01.txt

🔗 https://www.debian.org/security/2018/dsa-4162

🔗 https://irssi.org/security/irssi_sa_2018_01.txt

🔗 https://www.debian.org/security/2018/dsa-4162

相關漏洞威脅

CVE-2002-184010.0

irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remo...

CVE-2017-109659.8

An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a ...

CVE-2017-109669.8

An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable i...

CVE-2018-52069.8

When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.