Re: [SECURITY] [DSA 4016-1] irssi security update

From	Kurt Roeckx <kurt@roeckx.be>
Newsgroups	linux.debian.security
Subject	Re: [SECURITY] [DSA 4016-1] irssi security update
Date	2017-11-03 21:20 +0100
Message-ID	<uHQBA-7g-1@gated-at.bofh.it> (permalink)
References	<uHQid-8dA-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, Nov 03, 2017 at 07:51:34PM +0000, Salvatore Bonaccorso wrote:
> CVE-2017-15721
> 
>     Joseph Bisch discovered that Irssi does not properly handle
>     incorrectly formatted DCC CTCP messages. A malicious IRC server can
>     take advantage of this flaw to cause Irssi to crash, resulting in a
>     denial of service.

Since DCC stands for Direct Client to Client, the IRC server is
not involved and it can probably be triggered by an other user.


Kurt

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [SECURITY] [DSA 4016-1] irssi security update Kurt Roeckx <kurt@roeckx.be> - 2017-11-03 21:20 +0100
  Re: [SECURITY] [DSA 4016-1] irssi security update Tototechy <angelmarckus@rediffmail.com> - 2020-01-16 17:00 +0100

csiph-web