CVE-2016-7045
published 2016-09-27CVE-2016-7045: The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and…
PriorityP336high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
4.71%
90.8th percentile
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | irssi | < irssi 0.8.20-1 (bookworm) | irssi 0.8.20-1 (bookworm) |
| irssi | irssi | <= 0.8.19 | — |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.20-1 | 0.8.20-1 |
| irssi | irssi | >= 0 < 0.8.19-1ubuntu1.2 | 0.8.19-1ubuntu1.2 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f47r-27qv-728c: The format_send_to_gui function in the format parsing code in Irssi before 0
ghsa_unreviewed·2022-05-17
CVE-2016-7045 [HIGH] CWE-119 GHSA-f47r-27qv-728c: The format_send_to_gui function in the format parsing code in Irssi before 0
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
OSV
CVE-2016-7045: The format_send_to_gui function in the format parsing code in Irssi before 0
osv·2016-09-27·CVSS 7.5
CVE-2016-7045 [HIGH] CVE-2016-7045: The format_send_to_gui function in the format parsing code in Irssi before 0
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
OSV
irssi vulnerabilities
osv·2016-09-21·CVSS 7.5
CVE-2016-7044 [HIGH] irssi vulnerabilities
irssi vulnerabilities
Gabriel Campana and Adrien Guinet discovered that the format parsing code
in Irssi did not properly verify 24bit color codes. A remote attacker could
use this to cause a denial of service (application crash). (CVE-2016-7044)
Gabriel Campana and Adrien Guinet discovered that a buffer overflow existed
in the format parsing code in Irssi. A remote attacker could use this to
cause a denial of service (application crash). (CVE-2016-7045)
Red Hat
irssi: String length not validated in format_send_to_gui() causing crash
vendor_redhat·2016-09-21·CVSS 7.5
CVE-2016-7045 [HIGH] CWE-20 irssi: String length not validated in format_send_to_gui() causing crash
irssi: String length not validated in format_send_to_gui() causing crash
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
Package: irssi (Red Hat Enterprise Linux 6) - Not affected
Package: irssi (Red Hat Enterprise Linux 7) - Not affected
Ubuntu
Irssi vulnerabilities
vendor_ubuntu·2016-09-21·CVSS 7.5
CVE-2016-7044 [HIGH] Irssi vulnerabilities
Title: Irssi vulnerabilities
Summary: Irssi could be made to crash if it received specially crafted network
traffic.
Gabriel Campana and Adrien Guinet discovered that the format parsing code
in Irssi did not properly verify 24bit color codes. A remote attacker could
use this to cause a denial of service (application crash). (CVE-2016-7044)
Gabriel Campana and Adrien Guinet discovered that a buffer overflow existed
in the format parsing code in Irssi. A remote attacker could use this to
cause a denial of service (application crash). (CVE-2016-7045)
Instructions: After a standard system update you need to restart Irssi to make
all the necessary changes.
Debian
CVE-2016-7045: irssi - The format_send_to_gui function in the format parsing code in Irssi before 0.8.2...
vendor_debian·2016·CVSS 7.5
CVE-2016-7045 [HIGH] CVE-2016-7045: irssi - The format_send_to_gui function in the format parsing code in Irssi before 0.8.2...
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap corruption and crash) via vectors involving the length of a string.
Scope: local
bookworm: resolved (fixed in 0.8.20-1)
bullseye: resolved (fixed in 0.8.20-1)
forky: resolved (fixed in 0.8.20-1)
sid: resolved (fixed in 0.8.20-1)
trixie: resolved (fixed in 0.8.20-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-7045 irssi: String length not validated in format_send_to_gui() causing crash
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7045 [HIGH] CVE-2016-7045 irssi: String length not validated in format_send_to_gui() causing crash
CVE-2016-7045 irssi: String length not validated in format_send_to_gui() causing crash
A vulnerability in irssi was found caused by improper input checking allowing remote attacker to cause application crash.
The format_send_to_gui() function does not validate the length of the string before incrementing the `ptr' pointer in all cases. If that happens, the pointer `ptr' can be incremented twice and thus end past the boundaries of the original `dup' buffer.
Affected versions: Irssi 0.8.17-beta up to and including 0.8.19 up to 0.8.19-219-g52fedea
External Reference:
https://irssi.org/security/irssi_sa_2016.txt
Discussion:
Created irssi tracking bugs for this issue:
Affects: fedora-all [bug 1378345]
Affects: epel-5 [bug 1378346]
---
As shipped in RHEL-6, RHEL-7 or EPEL-5, the ptr po
Bugzilla
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
[bug automatically created by: add-tracking-bugs]
Discussion:
Use the
Bugzilla
New upstream release patching CVE-2016-7044 and CVE-2016-7045
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] New upstream release patching CVE-2016-7044 and CVE-2016-7045
New upstream release patching CVE-2016-7044 and CVE-2016-7045
+++ This bug was initially created as a clone of Bug #1378220 +++
Description of problem:
irssi versions 0.8.17 to 0.8.19 are affected by heap corruption bugs CVE-2016-7044 and CVE-2016-7045. Further details at https://irssi.org/2016/09/21/irssi-0.8.20-released/
The current package version for F25A is irssi-0.8.19-2.fc25.x86_64
Discussion:
(In reply to Steven Haigh from comment #0)
> +++ This bug was initially created as a clone of Bug #1378220 +++
>
> Description of problem:
> irssi versions 0.8.17 to 0.8.19 are affected by heap corruption bugs
> CVE-2016-7044 and CVE-2016-7045. Further details at
> https://irssi.org/2016/09/21/irssi-0.8.20-released/
>
> The current package version for F25A is irssi-0.8.19-2.fc25.x86_64
B
Bugzilla
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
bugzilla·2016-09-22·CVSS 7.5
CVE-2016-7044 [HIGH] CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
CVE-2016-7044 CVE-2016-7045 irssi: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While on
http://www.debian.org/security/2016/dsa-3672http://www.securitytracker.com/id/1036868http://www.ubuntu.com/usn/USN-3086-1https://irssi.org/security/irssi_sa_2016.txthttp://www.debian.org/security/2016/dsa-3672http://www.securitytracker.com/id/1036868http://www.ubuntu.com/usn/USN-3086-1https://irssi.org/security/irssi_sa_2016.txt
2016-09-27
Published