Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sat, 11 Mar 2017 22:25:55 +0100
From: Ailin Nemui <>
Subject: CVE Request: Irssi use after free in netjoin condition (2017/03)

Dear CVE Assignment Team,

please provide CVE for the following issue:

use after free condition during netjoin processing [1]
CWE Classification: CWE-416


Use after free while producing list of netjoins (CWE-416)

This issue was found and reported to us by APic.


This issue usually leads to segmentation faults. Targeted code
execution should be difficult.

Affected versions

Irssi up to and including 1.0.1

We believe Irssi 0.8.21 and prior are not affected since a different
code path causes the netjoins to be flushed prior to reaching the use
after free condition.

Fixed in

Irssi 1.0.2

Recommended action

Upgrade to Irssi 1.0.2. Irssi 1.0.2 is a maintenance release
without any new features.




Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ