CVE-2017-15227: Use After Free
Published Oct 22, 2017
·Updated
Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on.
Affected Software
2 affected componentsFixes available
debian/irssi
1.2.0-2+deb10u11.2.3-11.4.3-21.4.5-1
Irssi irssi<=1.0.4
Remediation
Patch Available
Patch Available
Event History
Oct 22, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15227?
CVE-2017-15227 has a medium severity rating due to the potential for use-after-free vulnerabilities.
2
How do I fix CVE-2017-15227?
To fix CVE-2017-15227, you should update Irssi to version 1.0.5 or later.
3
What versions of Irssi are affected by CVE-2017-15227?
Irssi versions prior to 1.0.5 are affected by CVE-2017-15227.
4
Can CVE-2017-15227 lead to security issues?
Yes, CVE-2017-15227 can lead to security issues such as arbitrary code execution under certain circumstances.
5
What systems are impacted by CVE-2017-15227?
CVE-2017-15227 impacts systems running affected versions of the Irssi software.