CVE-2018-5205: High severity Irssi irssi vulnerability
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 1.0.4-1ubuntu2.2 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.15-5ubuntu3.4 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.19-1ubuntu1.6 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.20-2ubuntu2.3 - Upgrade
Upgrade
debian/irssito a version that resolves this vulnerability.Fixed in 1.2.3-1Fixed in 1.4.3-2Fixed in 1.4.5-1 - Upgrade
Upgrade
alpine/irssito a version that resolves this vulnerability.Fixed in 1.0.6-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5205?
CVE-2018-5205 has been assessed as having moderate severity due to potential memory corruption issues.
How do I fix CVE-2018-5205?
To fix CVE-2018-5205, update Irssi to version 1.0.6 or later.
Which versions of Irssi are affected by CVE-2018-5205?
Irssi versions prior to 1.0.6 are affected by CVE-2018-5205.
Is CVE-2018-5205 present in Ubuntu distributions?
Yes, CVE-2018-5205 is present in various affected Ubuntu distributions prior to the patched versions.
What types of systems are vulnerable to CVE-2018-5205?
CVE-2018-5205 primarily affects systems running outdated versions of Irssi on Ubuntu and Debian.