CVE-2017-10965
irssi: NULL pointer dereference when receiving messages with invalid time stamps
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (düşük), Ubuntu (düşük).
Açıklama
An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | irssi | 1.0.4-r0 |
| alpine 3.11 | irssi | 1.0.4-r0 |
| alpine 3.12 | irssi | 1.0.4-r0 |
| alpine 3.13 | irssi | 1.0.4-r0 |
| alpine 3.14 | irssi | 1.0.4-r0 |
| alpine 3.15 | irssi | 1.0.4-r0 |
| alpine 3.16 | irssi | 1.0.4-r0 |
| alpine 3.17 | irssi | 1.0.4-r0 |
| alpine 3.18 | irssi | 1.0.4-r0 |
| alpine 3.19 | irssi | 1.0.4-r0 |
| alpine 3.20 | irssi | 1.0.4-r0 |
| alpine 3.21 | irssi | 1.0.4-r0 |
36 kaynaktaki 37 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | irssi | 1.0.4-r0 |
| alpine 3.11 | irssi | 1.0.4-r0 |
| alpine 3.12 | irssi | 1.0.4-r0 |
| alpine 3.13 | irssi | 1.0.4-r0 |
| alpine 3.14 | irssi | 1.0.4-r0 |
| alpine 3.15 | irssi | 1.0.4-r0 |
| alpine 3.16 | irssi | 1.0.4-r0 |
| alpine 3.17 | irssi | 1.0.4-r0 |
| alpine 3.18 | irssi | 1.0.4-r0 |
| alpine 3.19 | irssi | 1.0.4-r0 |
| alpine 3.20 | irssi | 1.0.4-r0 |
| alpine 3.21 | irssi | 1.0.4-r0 |
| alpine 3.22 | irssi | 1.0.4-r0 |
| alpine 3.23 | irssi | 1.0.4-r0 |
| alpine 3.24 | irssi | 1.0.4-r0 |
| alpine 3.3 | irssi | 0.8.21.r2 |
| alpine 3.4 | irssi | 0.8.21.r2 |
| alpine 3.5 | irssi | 0.8.21.r2 |
| alpine 3.6 | irssi | 1.0.4.-r0 |
| alpine 3.7 | irssi | 1.0.4-r0 |
| alpine 3.8 | irssi | 1.0.4-r0 |
| alpine 3.9 | irssi | 1.0.4-r0 |
| alpine edge | irssi | 1.0.4-r0 |
| debian 11 | irssi | 1.0.4-1 |
| debian 12 | irssi | 1.0.4-1 |
| debian 13 | irssi | 1.0.4-1 |
| debian 14 | irssi | 1.0.4-1 |
| debian 7 | irssi | 0.8.15-5+deb7u3 |
| debian 8 | irssi | 0.8.17-1+deb8u5 |
| debian 9 | irssi | 1.0.2-1+deb9u2 |
| echo | irssi | 1.0.4-1 |
| Red Hat | irssi | düzeltme belirtilmemiş |
| Red Hat | irssi-devel | düzeltme belirtilmemiş |
| ubuntu 14.04 | irssi | 0.8.15-5ubuntu3.3 |
| ubuntu 16.04 | irssi | 0.8.19-1ubuntu1.5 |
| ubuntu 16.04-ESM | irssi | 0.8.19-1ubuntu1.5 |
| ubuntu 17.04 | irssi | 0.8.20-2ubuntu2.2 |
Referanslar
- https://access.redhat.com/security/cve/CVE-2017-10965
- https://github.com/irssi/irssi/commit/5e26325317c72a04c1610ad952974e206384d291
- https://irssi.org/security/irssi_sa_2017_07.txt
- https://nvd.nist.gov/vuln/detail/CVE-2017-10965
- https://ubuntu.com/security/notices/USN-3465-1
- https://www.cve.org/CVERecord?id=CVE-2017-10965
- https://www.debian.org/security/2017/dsa-4016