CVE-2016-7044
published 2016-09-27CVE-2016-7044: The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a…
PriorityP336high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
4.71%
90.8th percentile
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | irssi | < irssi 0.8.20-1 (bookworm) | irssi 0.8.20-1 (bookworm) |
| irssi | irssi | <= 0.8.19 | — |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.19-1ubuntu1.2 | 0.8.19-1ubuntu1.2 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Irssi vulnerabilities
vendor_ubuntu·2016-09-21·CVSS 7.5
CVE-2016-7044 [HIGH] Irssi vulnerabilities
Title: Irssi vulnerabilities
Summary: Irssi could be made to crash if it received specially crafted network
traffic.
Gabriel Campana and Adrien Guinet discovered that the format parsing code
in Irssi did not properly verify 24bit color codes. A remote attacker could
use this to cause a denial of service (application crash). (CVE-2016-7044)
Gabriel Campana and Adrien Guinet discovered that a buffer overflow existed
in the format parsing code in Irssi. A remote attacker could use this to
cause a denial of service (application crash). (CVE-2016-7045)
Instructions: After a standard system update you need to restart Irssi to make
all the necessary changes.
Red Hat
irssi: Unchecked input in unformat_24bit_color() can lead to crash
vendor_redhat·2016-09-21·CVSS 7.5
CVE-2016-7044 [HIGH] CWE-20 irssi: Unchecked input in unformat_24bit_color() can lead to crash
irssi: Unchecked input in unformat_24bit_color() can lead to crash
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
Package: irssi (Red Hat Enterprise Linux 6) - Not affected
Package: irssi (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2016-7044: irssi - The unformat_24bit_color function in the format parsing code in Irssi before 0.8...
vendor_debian·2016·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044: irssi - The unformat_24bit_color function in the format parsing code in Irssi before 0.8...
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
Scope: local
bookworm: resolved (fixed in 0.8.20-1)
bullseye: resolved (fixed in 0.8.20-1)
forky: resolved (fixed in 0.8.20-1)
sid: resolved (fixed in 0.8.20-1)
trixie: resolved (fixed in 0.8.20-1)
GHSA
GHSA-pcc5-fpf6-mmhc: The unformat_24bit_color function in the format parsing code in Irssi before 0
ghsa_unreviewed·2022-05-17
CVE-2016-7044 [HIGH] CWE-119 GHSA-pcc5-fpf6-mmhc: The unformat_24bit_color function in the format parsing code in Irssi before 0
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
OSV
CVE-2016-7044: The unformat_24bit_color function in the format parsing code in Irssi before 0
osv·2016-09-27·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044: The unformat_24bit_color function in the format parsing code in Irssi before 0
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
OSV
irssi vulnerabilities
osv·2016-09-21·CVSS 7.5
CVE-2016-7044 [HIGH] irssi vulnerabilities
irssi vulnerabilities
Gabriel Campana and Adrien Guinet discovered that the format parsing code
in Irssi did not properly verify 24bit color codes. A remote attacker could
use this to cause a denial of service (application crash). (CVE-2016-7044)
Gabriel Campana and Adrien Guinet discovered that a buffer overflow existed
in the format parsing code in Irssi. A remote attacker could use this to
cause a denial of service (application crash). (CVE-2016-7045)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
[bug automatically created by: add-tracking-bugs]
Discussion:
Use the
Bugzilla
New upstream release patching CVE-2016-7044 and CVE-2016-7045
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] New upstream release patching CVE-2016-7044 and CVE-2016-7045
New upstream release patching CVE-2016-7044 and CVE-2016-7045
+++ This bug was initially created as a clone of Bug #1378220 +++
Description of problem:
irssi versions 0.8.17 to 0.8.19 are affected by heap corruption bugs CVE-2016-7044 and CVE-2016-7045. Further details at https://irssi.org/2016/09/21/irssi-0.8.20-released/
The current package version for F25A is irssi-0.8.19-2.fc25.x86_64
Discussion:
(In reply to Steven Haigh from comment #0)
> +++ This bug was initially created as a clone of Bug #1378220 +++
>
> Description of problem:
> irssi versions 0.8.17 to 0.8.19 are affected by heap corruption bugs
> CVE-2016-7044 and CVE-2016-7045. Further details at
> https://irssi.org/2016/09/21/irssi-0.8.20-released/
>
> The current package version for F25A is irssi-0.8.19-2.fc25.x86_64
B
Bugzilla
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While on
Bugzilla
CVE-2016-7044 irssi: Unchecked input in unformat_24bit_color() can lead to crash
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044 irssi: Unchecked input in unformat_24bit_color() can lead to crash
CVE-2016-7044 irssi: Unchecked input in unformat_24bit_color() can lead to crash
A vulnerability caused by improper input checking was found in irssi, allowing remote attacker to cause application crash.
The unformat_24bit_color() function is called by format_send_to_gui() to decode 24bit color codes into their components. The pointer is advanced unconditionally without checking if a complete code was supplied. Thus, after the return of unformat_24bit_color(), ptr might be invalid and point out of the buffer.
Affected versions: Irssi 0.8.17-beta up to and including 0.8.19 up to 0.8.19-219-g52fedea
External Reference:
https://irssi.org/security/irssi_sa_2016.txt
Discussion:
Created irssi tracking bugs for this issue:
Affects: fedora-all [bug 1378345]
Affects: epel-5 [bug 1378346]
-
http://www.debian.org/security/2016/dsa-3672http://www.securitytracker.com/id/1036868http://www.ubuntu.com/usn/USN-3086-1https://irssi.org/security/irssi_sa_2016.txthttp://www.debian.org/security/2016/dsa-3672http://www.securitytracker.com/id/1036868http://www.ubuntu.com/usn/USN-3086-1https://irssi.org/security/irssi_sa_2016.txt
2016-09-27
Published