CVE-2019-5882: Use After Free
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/irssito a version that resolves this vulnerability.Fixed in 1.2.3-1Fixed in 1.4.3-2Fixed in 1.4.5-1 - Upgrade
Upgrade
alpine/irssito a version that resolves this vulnerability.Fixed in 1.1.2-r0 - Upgrade
Upgrade
Irssito a version that resolves this vulnerability.Fixed in 1.1.2
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5882?
CVE-2019-5882 is classified as a medium severity vulnerability due to the potential for exploitation through a use-after-free condition.
How do I fix CVE-2019-5882?
To remediate CVE-2019-5882, upgrade Irssi to version 1.1.2 or later.
Which versions of Irssi are affected by CVE-2019-5882?
Irssi versions 1.1.0 through 1.1.1 are vulnerable to CVE-2019-5882.
What type of vulnerability is CVE-2019-5882?
CVE-2019-5882 is a use-after-free vulnerability that occurs when hidden lines are expired from the scroll buffer.
On which operating systems can CVE-2019-5882 be found?
CVE-2019-5882 affects Irssi installations on Debian and Ubuntu versions 14.04, 16.04, 18.04, and 18.10.