CVE-2017-15228: High severity Irssi irssi vulnerability
Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/irssito a version that resolves this vulnerability.Fixed in 1.2.0-2+deb10u1Fixed in 1.2.3-1Fixed in 1.4.3-2Fixed in 1.4.5-1 - Upgrade
Upgrade
alpine/irssito a version that resolves this vulnerability.Fixed in 1.0.5-r0 - Upgrade
Upgrade
alpine/irssito a version that resolves this vulnerability.Fixed in 1.0.6-r0 - Upgrade
Upgrade
Irssito a version that resolves this vulnerability.Fixed in 1.0.5
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15228?
CVE-2017-15228 has a medium severity rating due to potential access to out-of-bounds data.
How do I fix CVE-2017-15228?
To fix CVE-2017-15228, update Irssi to version 1.0.5 or later.
What versions of Irssi are affected by CVE-2017-15228?
Irssi versions before 1.0.5 are affected by CVE-2017-15228.
Can CVE-2017-15228 lead to data leakage?
Yes, CVE-2017-15228 may lead to data leakage by accessing memory beyond allocated buffers.
Is CVE-2017-15228 a local or remote vulnerability?
CVE-2017-15228 is primarily a local vulnerability that could be exploited by a user with the ability to install themes.