From 342e0edbc4e803948771205335bdbcfbd26fb551 Mon Sep 17 00:00:00 2001 From: feld Date: Sat, 8 Jul 2017 14:15:24 +0000 Subject: Document irssi vulnerabilities PR: 220544 Security: CVE-2017-10965 Security: CVE-2017-10966 --- security/vuxml/vuln.xml | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f9ae780b81f5..fa6cfc96d4ba 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,39 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + irssi -- multiple vulnerabilities + + + irssi + 1.0.4,1 + + + + +

irssi reports:

+
When receiving messages with invalid time stamps, Irssi + would try to dereference a NULL pointer.
+
While updating the internal nick list, Irssi may + incorrectly use the GHashTable interface and free the nick while + updating it. This will then result in use-after-free conditions on each + access of the hash table.
+

+ + + + https://irssi.org/security/irssi_sa_2017_07.txt + CVE-2017-10965 + CVE-2017-10966 + ports/220544 + + + 2017-07-05 + 2017-07-08 + + + oniguruma -- multiple vulnerabilities -- cgit