pkg:Alpine/irssi

All known vulnerabilities

• CRITICAL9.8CVE-2019-15717Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
  from 0, < 1.2.2-r0
• CRITICAL9.8CVE-2019-5882Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
  from 0, < 1.1.2-r0
• CRITICAL9.8CVE-2018-7054An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
  from 0, < 1.1.1-r0
• CRITICAL9.8An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
  from 0, < 1.1.1-r0
• CRITICAL9.8In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.
  from 0, < 1.0.6-r0
• CRITICAL9.8When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
  from 0, < 1.0.6-r0
• CRITICAL9.8An issue was discovered in Irssi before 1.0.4.
  from 0, < 1.0.4-r0
• CRITICAL9.8irssi - security update
  from 0, < 1.0.4-r0
• HIGH8.1irssi - security update
  from 0, < 1.2.1-r0
• HIGH7.5An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.
  from 0, < 1.1.1-r0
• HIGH7.5irssi - security update
  from 0, < 1.1.1-r0
• HIGH7.5irssi - security update
  from 0, < 1.1.1-r0
• HIGH7.5When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
  from 0, < 1.0.6-r0
• HIGH7.5irssi - security update
  from 0, < 1.0.6-r0
• HIGH7.5In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
  from 0, < 1.0.5-r0
• HIGH7.5In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference.
  from 0, < 1.0.5-r0
• HIGH7.5Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string.
  from 0, < 1.0.5-r0
• HIGH7.5irssi - security update
  from 0, < 1.0.5-r0
• HIGH7.5In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allo…
  from 0, < 1.0.3-r0
• HIGH7.5irssi - security update
  from 0, < 1.0.3-r0
• HIGH7.5Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formattin…
  from 0, < 0.8.21-r0
• HIGH7.5Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving string…
  from 0, < 0.8.21-r0
• HIGH7.5Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color…
  from 0, < 0.8.21-r0
• HIGH7.5Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick messag…
  from 0, < 0.8.21-r0
• HIGH7.5The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a…
  from 0, < 0.8.21-r0
• HIGH7.5The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (hea…
  from 0, < 0.8.20-r0
• HIGH7.5irssi - security update
  from 0, < 0.8.20-r0
• MEDIUM5.9In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.
  from 0, < 1.0.5-r0