CVE-2017-15721: Null Pointer Dereference
In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15721?
CVE-2017-15721 has been classified as a high severity vulnerability due to its potential to cause a NULL pointer dereference.
How do I fix CVE-2017-15721?
To fix CVE-2017-15721, update Irssi to version 1.0.5 or later, or apply the relevant security patches provided by your Linux distribution.
Which versions of Irssi are affected by CVE-2017-15721?
CVE-2017-15721 affects Irssi versions prior to 1.0.5, including version 1.0.4 and earlier.
What kind of attack does CVE-2017-15721 facilitate?
CVE-2017-15721 could potentially allow an attacker to crash the Irssi client through malformed DCC CTCP messages.
Is CVE-2017-15721 related to any other vulnerabilities?
Yes, CVE-2017-15721 is related to CVE-2017-9468, addressing similar issues in the handling of DCC CTCP messages.