CVE-2018-7053: Use After Free
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/irssito a version that resolves this vulnerability.Fixed in 1.2.3-1Fixed in 1.4.3-2Fixed in 1.4.5-1 - Upgrade
Upgrade
Irssito a version that resolves this vulnerability.Fixed in 1.0.7 - Upgrade
Upgrade
Irssito a version that resolves this vulnerability.Fixed in 1.1.1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7053?
CVE-2018-7053 has a severity rating of medium due to the potential for a use-after-free vulnerability.
How do I fix CVE-2018-7053?
To fix CVE-2018-7053, upgrade to Irssi version 1.0.7 or later, or versions 1.1.1 and above.
Which versions of Irssi are affected by CVE-2018-7053?
CVE-2018-7053 affects Irssi versions prior to 1.0.7 and 1.1.x before 1.1.1.
Can CVE-2018-7053 be exploited remotely?
Yes, CVE-2018-7053 can potentially be exploited remotely if an attacker sends unexpected SASL messages.
What platforms are impacted by CVE-2018-7053?
CVE-2018-7053 impacts Irssi installations on various platforms including Debian and Ubuntu.