Skip to content
Noroxi

irssi records

43 published records for vendor irssi.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
86%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

43 records
  • CVE-2002-1840
    41Plan

    irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attacke

    CriticalCVSS 10.0No exploitEPSS 2%

    irssi · irssiDec 31, 2002

  • CVE-2017-10965
    40Plan

    An issue was discovered in Irssi before 1.0.4.

    CriticalCVSS 9.8No exploitEPSS 3%

    irssi · irssiJul 7, 2017

  • CVE-2017-7191
    40Plan

    The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitra

    CriticalCVSS 9.8No exploitEPSS 3%

    irssi · irssiMar 27, 2017

  • CVE-2017-10966
    40Plan

    An issue was discovered in Irssi before 1.0.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiJul 7, 2017

  • CVE-2019-5882
    40Plan

    Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiJan 9, 2019

  • CVE-2019-15717
    40Plan

    Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiAug 29, 2019

  • CVE-2018-7053
    40Plan

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiFeb 15, 2018

  • CVE-2018-7054
    40Plan

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiFeb 15, 2018

  • CVE-2018-5208
    40Plan

    In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiJan 6, 2018

  • CVE-2020-29602
    40Plan

    The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · docker imageDec 8, 2020

  • CVE-2018-5206
    40Plan

    When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.

    CriticalCVSS 9.8No exploitEPSS 2%

    irssi · irssiJan 6, 2018

  • CVE-2007-4396
    38Monitor

    Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0

    CriticalCVSS 9.3No exploitEPSS 2%

    irssi · irssiAug 18, 2007

  • CVE-2019-13045
    33Monitor

    Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the se

    HighCVSS 8.1No exploitEPSS 3%

    irssi · irssiJun 29, 2019

  • CVE-2017-9469
    32Monitor

    In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the alloc

    HighCVSS 7.5No exploitEPSS 6%

    irssi · irssiJun 6, 2017

  • CVE-2017-5193
    32Monitor

    The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a

    HighCVSS 7.5No exploitEPSS 5%

    irssi · irssiMar 3, 2017

  • CVE-2017-5195
    32Monitor

    Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ANSI x8 color c

    HighCVSS 7.5No exploitEPSS 5%

    irssi · irssiMar 3, 2017

  • CVE-2017-5196
    32Monitor

    Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vectors involving strings

    HighCVSS 7.5No exploitEPSS 5%

    irssi · irssiMar 3, 2017

  • CVE-2017-5194
    31Monitor

    Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an invalid nick message

    HighCVSS 7.5No exploitEPSS 4%

    irssi · irssiMar 3, 2017

  • CVE-2017-5356
    31Monitor

    Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting

    HighCVSS 7.5No exploitEPSS 4%

    irssi · irssiMar 3, 2017

  • CVE-2016-7044
    31Monitor

    The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote at

    HighCVSS 7.5No exploitEPSS 4%

    irssi · irssiSep 27, 2016

  • CVE-2016-7045
    31Monitor

    The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap

    HighCVSS 7.5No exploitEPSS 4%

    irssi · irssiSep 27, 2016

  • CVE-2017-9468
    31Monitor

    In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.

    HighCVSS 7.5No exploitEPSS 3%

    irssi · irssiJun 6, 2017

  • CVE-2018-7051
    31Monitor

    An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1.

    HighCVSS 7.5No exploitEPSS 2%

    irssi · irssiFeb 15, 2018

  • CVE-2018-5205
    31Monitor

    When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.

    HighCVSS 7.5No exploitEPSS 2%

    irssi · irssiJan 6, 2018

  • CVE-2017-15721
    31Monitor

    In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference.

    HighCVSS 7.5No exploitEPSS 2%

    irssi · irssiOct 22, 2017