CVE-2010-1156: Null Pointer Dereference
Published Apr 16, 2010
·Updated
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.
Affected Software
24 affected components
Irssi irssi<=0.8.15
Irssi irssi=0.8.12-rc1
Irssi irssi=0.8.14
Irssi irssi=0.8.2
Irssi irssi=0.8.11-rc1
Irssi irssi=0.8.13
Irssi irssi=0.8.10-rc8
Irssi irssi=0.8.8
Irssi irssi=0.8.13-rc1
Irssi irssi=0.8.1
Irssi irssi=0.8.10-rc5
Irssi irssi=0.8.7
Irssi irssi=0.8.12
Irssi irssi=0.8.11-rc2
Irssi irssi=0.8.11
Irssi irssi=0.8.6
Irssi irssi=0.8.5
Irssi irssi=0.8.4
Irssi irssi=0.8.0
Irssi irssi=0.8.10-rc7
Irssi irssi=0.8.3
Irssi irssi=0.8.9
Irssi irssi=0.8.10-rc6
Irssi irssi=0.8.10
Remediation
Patch Available
Event History
Apr 16, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1156?
CVE-2010-1156 has a severity rating that indicates it can cause a denial of service due to a NULL pointer dereference.
2
How do I fix CVE-2010-1156?
To fix CVE-2010-1156, update Irssi to version 0.8.15 or later.
3
What systems are affected by CVE-2010-1156?
CVE-2010-1156 affects Irssi versions up to and including 0.8.15 as well as multiple earlier specific release candidates.
4
What type of attack can exploit CVE-2010-1156?
CVE-2010-1156 can be exploited by remote attackers to crash the Irssi application, causing a denial of service.
5
When was CVE-2010-1156 published?
CVE-2010-1156 was published in 2010 as a vulnerability affecting Irssi.