CVE-2016-7044: Buffer Overflow
Published Sep 27, 2016
·Updated
The unformat24bitcolor function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote attackers to cause a denial of service (heap corruption and crash) via an incomplete 24bit color code.
Affected Software
3 affected components
Irssi irssi<=0.8.19
Debian Debian Linux=8.0
Canonical Ubuntu Linux=16.04
Remediation
Patch Available
Event History
Sep 27, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7044?
CVE-2016-7044 has a medium severity rating, primarily due to its potential to cause a denial of service.
2
How do I fix CVE-2016-7044?
To fix CVE-2016-7044, you should upgrade to Irssi version 0.8.20 or later.
3
Who is affected by CVE-2016-7044?
CVE-2016-7044 affects users of Irssi versions prior to 0.8.20 when compiled with true-color enabled.
4
What kind of attack does CVE-2016-7044 facilitate?
CVE-2016-7044 allows remote attackers to exploit heap corruption, resulting in a crash of the application.
5
Is CVE-2016-7044 specific to any operating system?
Yes, CVE-2016-7044 specifically impacts Debian GNU/Linux 8.0 and Ubuntu Linux 16.04 among other platforms.