PT-2017-19418 · Irssi · Irssi-Otr
Published
2017-02-07
·
Updated
2017-02-07
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
irssi-otr (affected versions not specified)
Description
A flaw was discovered in the way irssi-otr handles data returned by libotr. After initiating an OTR session, only the first line is sent as a PRIVMSG, while additional data is sent as raw commands to the IRC server. This additional data is typically a human-readable HTML-formatted instruction message from libotr, which is a fixed string. Although this is considered a minor security concern, remediation is necessary to prevent further security issues.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Irssi-Otr