CVE-2017-5193: Null Pointer Dereference
Published Mar 3, 2017
·Updated
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.
Affected Software
2 affected components
Irssi irssi<0.8.21
Debian Debian Linux=7.0
Remediation
Patch Available
Event History
Mar 3, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5193?
CVE-2017-5193 has a severity rating that is classified as a denial of service vulnerability, which can lead to application crashes.
2
How do I fix CVE-2017-5193?
To fix CVE-2017-5193, upgrade Irssi to version 0.8.21 or later.
3
Which versions of Irssi are vulnerable to CVE-2017-5193?
Irssi versions prior to 0.8.21 are vulnerable to CVE-2017-5193.
4
What impact does CVE-2017-5193 have on affected systems?
The impact of CVE-2017-5193 is a denial of service caused by a NULL pointer dereference that leads to application crashes.
5
Does CVE-2017-5193 affect Debian Linux?
Yes, CVE-2017-5193 affects Debian Linux versions prior to the security patches related to Irssi.