PT-2019-5821 · Irssi+2 · Irssi+2

Publicado 2019-01-09 · Atualizado 2024-06-15 · CVE-2019-5882

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Irssi versions 1.1.x prior to 1.1.2

Description The issue is related to a use after free error when hidden lines expire from the scroll buffer. This could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Irssi versions 1.1.x prior to 1.1.2, update to version 1.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the scroll buffer until a patch is available.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2021-03129

CVE-2019-5882

MGASA-2019-0091

OPENSUSE-SU-2019:0048-1

OPENSUSE-SU-2019_0048-1

OPENSUSE-SU-2024:10865-1

USN-3862-1

Produtos afetados

Irssi

Suse

Ubuntu

Referências · 50

• https://github.com/irssi/irssi/pull/948 · Correção
• https://suse.com/security/cve/CVE-2017-10966 · Nota
• https://bdu.fstec.ru/vul/2021-03129 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-5882 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/EKYFN6CBVBNNWGETNO3E5L265NZTS7HI/#EKYFN6CBVBNNWGETNO3E5L265NZTS7HI · Nota
• https://irssi.org/security/irssi_sa_2019_01.txt · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2019-0091.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-5207 · Nota
• https://ubuntu.com/security/notices/USN-3862-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-5206 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2019-5882 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-7050 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10865-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-10965 · Nota
• https://security.alpinelinux.org/vuln/CVE-2019-5882 · Nota