First published: Fri Apr 16 2010(Updated: )
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Irssi Irssi | <=0.8.15 | |
Irssi Irssi | =0.8.12-rc1 | |
Irssi Irssi | =0.8.14 | |
Irssi Irssi | =0.8.2 | |
Irssi Irssi | =0.8.11-rc1 | |
Irssi Irssi | =0.8.13 | |
Irssi Irssi | =0.8.10-rc8 | |
Irssi Irssi | =0.8.8 | |
Irssi Irssi | =0.8.13-rc1 | |
Irssi Irssi | =0.8.1 | |
Irssi Irssi | =0.8.10-rc5 | |
Irssi Irssi | =0.8.7 | |
Irssi Irssi | =0.8.12 | |
Irssi Irssi | =0.8.11-rc2 | |
Irssi Irssi | =0.8.11 | |
Irssi Irssi | =0.8.6 | |
Irssi Irssi | =0.8.5 | |
Irssi Irssi | =0.8.4 | |
Irssi Irssi | =0.8.0 | |
Irssi Irssi | =0.8.10-rc7 | |
Irssi Irssi | =0.8.3 | |
Irssi Irssi | =0.8.9 | |
Irssi Irssi | =0.8.10-rc6 | |
Irssi Irssi | =0.8.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-1156 has a severity rating that indicates it can cause a denial of service due to a NULL pointer dereference.
To fix CVE-2010-1156, update Irssi to version 0.8.15 or later.
CVE-2010-1156 affects Irssi versions up to and including 0.8.15 as well as multiple earlier specific release candidates.
CVE-2010-1156 can be exploited by remote attackers to crash the Irssi application, causing a denial of service.
CVE-2010-1156 was published in 2010 as a vulnerability affecting Irssi.