CVE-2010-1156
published 2010-04-16CVE-2010-1156: core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.88%
85.3th percentile
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | irssi | < irssi 0.8.15-1 (bookworm) | irssi 0.8.15-1 (bookworm) |
| irssi | irssi | <= 0.8.15 | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | — | — |
| irssi | irssi | >= 0 < 0.8.15-1 | 0.8.15-1 |
| irssi | irssi | >= 0 < 0.8.15-1 | 0.8.15-1 |
| irssi | irssi | >= 0 < 0.8.15-1 | 0.8.15-1 |
| irssi | irssi | >= 0 < 0.8.15-1 | 0.8.15-1 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_ubuntu6.8MEDIUM
vendor_debian4.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
irssi regression
vendor_ubuntu·2010-04-20·CVSS 6.8
[MEDIUM] irssi regression
Title: irssi regression
Summary: irssi regression
USN-929-1 fixed vulnerabilities in irssi. The upstream changes introduced a
regression when using irssi with SSL and an IRC proxy. This update fixes
the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that irssi did not perform certificate host validation
when using SSL connections. An attacker could exploit this to perform a man
in the middle attack to view sensitive information or alter encrypted
communications. (CVE-2010-1155)
Aurelien Delaitre discovered that irssi could be made to dereference a NULL
pointer when a user left the channel. A remote attacker could cause a
denial of service via application crash. (CVE-2010-1156)
This update also adds SSLv3 and TLSv1 support, while disabling t
Ubuntu
irssi vulnerabilities
vendor_ubuntu·2010-04-15·CVSS 6.8
CVE-2010-1155 [MEDIUM] irssi vulnerabilities
Title: irssi vulnerabilities
Summary: irssi vulnerabilities
It was discovered that irssi did not perform certificate host validation
when using SSL connections. An attacker could exploit this to perform a man
in the middle attack to view sensitive information or alter encrypted
communications. (CVE-2010-1155)
Aurelien Delaitre discovered that irssi could be made to dereference a NULL
pointer when a user left the channel. A remote attacker could cause a
denial of service via application crash. (CVE-2010-1156)
This update also adds SSLv3 and TLSv1 support, while disabling the old,
insecure SSLv2 protocol.
Instructions: After a standard system upgrade you need to restart irssi to effect the
necessary changes.
Debian
CVE-2010-1156: irssi - core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial...
vendor_debian·2010·CVSS 4.3
CVE-2010-1156 [MEDIUM] CVE-2010-1156: irssi - core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial...
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
Scope: local
bookworm: resolved (fixed in 0.8.15-1)
bullseye: resolved (fixed in 0.8.15-1)
forky: resolved (fixed in 0.8.15-1)
sid: resolved (fixed in 0.8.15-1)
trixie: resolved (fixed in 0.8.15-1)
GHSA
GHSA-xw2v-vp7m-x4qc: core/nicklist
ghsa_unreviewed·2022-05-02
CVE-2010-1156 [MEDIUM] GHSA-xw2v-vp7m-x4qc: core/nicklist
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
OSV
CVE-2010-1156: core/nicklist
osv·2010-04-16·CVSS 4.3
CVE-2010-1156 [MEDIUM] CVE-2010-1156: core/nicklist
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
No detection rules found.
No public exploits indexed.
http://irssi.org/newshttp://irssi.org/news/ChangeLoghttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.htmlhttp://marc.info/?l=oss-security&m=127098845125270&w=2http://marc.info/?l=oss-security&m=127110132019166&w=2http://marc.info/?l=oss-security&m=127111071631857&w=2http://marc.info/?l=oss-security&m=127115784314970&w=2http://marc.info/?l=oss-security&m=127119240204394&w=2http://secunia.com/advisories/39365http://secunia.com/advisories/39620http://secunia.com/advisories/39797http://securitytracker.com/id?1023845http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126http://www.ubuntu.com/usn/USN-929-1http://www.vupen.com/english/advisories/2010/0856http://www.vupen.com/english/advisories/2010/0987http://www.vupen.com/english/advisories/2010/1107http://www.vupen.com/english/advisories/2010/1110https://exchange.xforce.ibmcloud.com/vulnerabilities/57791http://irssi.org/newshttp://irssi.org/news/ChangeLoghttp://lists.fedoraproject.org/pipermail/package-announce/2010-May/041054.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.htmlhttp://marc.info/?l=oss-security&m=127098845125270&w=2http://marc.info/?l=oss-security&m=127110132019166&w=2http://marc.info/?l=oss-security&m=127111071631857&w=2http://marc.info/?l=oss-security&m=127115784314970&w=2http://marc.info/?l=oss-security&m=127119240204394&w=2http://secunia.com/advisories/39365http://secunia.com/advisories/39620http://secunia.com/advisories/39797http://securitytracker.com/id?1023845http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.497301http://svn.irssi.org/cgi-bin/viewvc.cgi/irssi/trunk/src/core/nicklist.c?root=irssi&r1=4922&r2=5126http://www.ubuntu.com/usn/USN-929-1http://www.vupen.com/english/advisories/2010/0856http://www.vupen.com/english/advisories/2010/0987http://www.vupen.com/english/advisories/2010/1107http://www.vupen.com/english/advisories/2010/1110https://exchange.xforce.ibmcloud.com/vulnerabilities/57791
2010-04-16
Published