CVE-2016-7553
irssi - security update
3.3
LOW
CVSS 3.1
EPSS 0.08%
Description
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
How to fix CVE-2016-7553
To remediate CVE-2016-7553, upgrade the affected package to a fixed version below.
- Debian/irssi—upgrade to 0.8.20-2 or later
- —upgrade to 0.8.15-5+deb7u1 or later
Is CVE-2016-7553 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (2)
- from 0, < 0.8.20-2
- from 0, < 0.8.15-5+deb7u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | LOW3.3 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |