CVE-2018-5207: High severity Irssi irssi vulnerability
When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 1.0.4-1ubuntu2.2 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.15-5ubuntu3.4 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.19-1ubuntu1.6 - Upgrade
Upgrade
ubuntu/irssito a version that resolves this vulnerability.Fixed in 0.8.20-2ubuntu2.3 - Upgrade
Upgrade
debian/irssito a version that resolves this vulnerability.Fixed in 1.2.3-1Fixed in 1.4.3-2Fixed in 1.4.5-1 - Upgrade
Upgrade
alpine/irssito a version that resolves this vulnerability.Fixed in 1.0.6-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5207?
CVE-2018-5207 is classified as a high-severity vulnerability due to potential memory corruption.
How do I fix CVE-2018-5207?
To fix CVE-2018-5207, upgrade to Irssi version 1.0.6 or later.
Which software versions are affected by CVE-2018-5207?
CVE-2018-5207 affects all versions of Irssi prior to 1.0.6.
Is CVE-2018-5207 present in Debian 9.0?
Yes, CVE-2018-5207 affects Debian 9.0 if the installed version of Irssi is before 1.0.6.
What kind of vulnerability is CVE-2018-5207?
CVE-2018-5207 is a type of memory corruption vulnerability caused by incomplete variable arguments.