This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2017-9469 →

DEBIAN-CVE-2017-9469

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memor...

Original description

The description as published by the source.

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

Debian:13 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

Debian:14 irssi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

References

advisory security-tracker.debian.org