ALT-PU-2017-1002-1
Closed vulnerabilities
Modified: 2024-11-21
CVE-2010-1155
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate.
- http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab
- http://github.com/ensc/irssi-proxy/commit/85bbc05b21678e80423815d2ef1dfe26208491ab
- http://irssi.org/news
- http://irssi.org/news
- http://irssi.org/news/ChangeLog
- http://irssi.org/news/ChangeLog
- FEDORA-2010-6629
- FEDORA-2010-6629
- SUSE-SR:2010:011
- SUSE-SR:2010:011
- [oss-security] 20100411 CVE request: irssi 0.8.15
- [oss-security] 20100411 CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- 39365
- 39365
- 39620
- 39620
- 39797
- 39797
- SSA:2010-116-01
- SSA:2010-116-01
- USN-929-1
- USN-929-1
- ADV-2010-0856
- ADV-2010-0856
- ADV-2010-0987
- ADV-2010-0987
- ADV-2010-1107
- ADV-2010-1107
- ADV-2010-1110
- ADV-2010-1110
- irssi-hostname-mitm(57790)
- irssi-hostname-mitm(57790)
Modified: 2024-11-21
CVE-2010-1156
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
- http://irssi.org/news
- http://irssi.org/news
- http://irssi.org/news/ChangeLog
- http://irssi.org/news/ChangeLog
- FEDORA-2010-6629
- FEDORA-2010-6629
- SUSE-SR:2010:011
- SUSE-SR:2010:011
- [oss-security] 20100411 CVE request: irssi 0.8.15
- [oss-security] 20100411 CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100412 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- [oss-security] 20100413 Re: CVE request: irssi 0.8.15
- 39365
- 39365
- 39620
- 39620
- 39797
- 39797
- 1023845
- 1023845
- SSA:2010-116-01
- SSA:2010-116-01
- http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126
- http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126
- USN-929-1
- USN-929-1
- ADV-2010-0856
- ADV-2010-0856
- ADV-2010-0987
- ADV-2010-0987
- ADV-2010-1107
- ADV-2010-1107
- ADV-2010-1110
- ADV-2010-1110
- irssi-unspecified-dos(57791)
- irssi-unspecified-dos(57791)
Modified: 2024-11-21
CVE-2016-7044
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
Modified: 2024-11-21
CVE-2016-7045
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.