CVE-2017-15721

Published: 22 October 2017

In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative to CVE-2017-9468.

Priority

Medium

CVSS 3 base score: 7.5

Status

Notes

same commit as CVE-2017-15227

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15721
• http://openwall.com/lists/oss-security/2017/10/22/4
• https://irssi.org/security/irssi_sa_2017_10.txt
• https://ubuntu.com/security/notices/USN-3465-1
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879521