CVE-2017-5356
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-5356
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5356.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-5356
- Related
- Published
- 2017-03-03T15:59:00Z
- Modified
- 2024-09-03T01:51:36.191046Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).
- References
-
- http://www.securityfocus.com/bid/96581
- https://irssi.org/security/irssi_sa_2017_01.txt
- http://www.openwall.com/lists/oss-security/2017/01/12/8
- http://www.openwall.com/lists/oss-security/2017/01/13/2
- https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html
- https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
- https://security.alpinelinux.org/vuln/CVE-2017-5356
- https://security-tracker.debian.org/tracker/CVE-2017-5356
Affected packages
Alpine:v3.2 / irssi
Package
- Name
- irssi
- Purl
- pkg:apk/alpine/irssi?arch=source
Alpine:v3.3 / irssi
Package
- Name
- irssi
- Purl
- pkg:apk/alpine/irssi?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.8.21-r0
Affected versions
0.*
0.8.12-r0
0.8.13_rc1-r0
0.8.13-r0
0.8.14-r0
0.8.14-r1
0.8.14-r2
0.8.15-r0
0.8.15-r1
0.8.15-r2
0.8.15-r3
0.8.15-r4
0.8.15-r5
0.8.15-r6
0.8.15-r7
0.8.15-r8
0.8.15-r9
0.8.15-r10
0.8.15-r11
0.8.15-r12
0.8.15-r13
0.8.15-r14
0.8.16_rc1-r0
0.8.16-r0
0.8.16-r1
0.8.17-r0
0.8.17-r1
0.8.17-r2
0.8.17-r3
0.8.17-r4
0.8.20-r0
Alpine:v3.4 / irssi
Package
- Name
- irssi
- Purl
- pkg:apk/alpine/irssi?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.8.21-r0
Affected versions
0.*
0.8.12-r0
0.8.13_rc1-r0
0.8.13-r0
0.8.14-r0
0.8.14-r1
0.8.14-r2
0.8.15-r0
0.8.15-r1
0.8.15-r2
0.8.15-r3
0.8.15-r4
0.8.15-r5
0.8.15-r6
0.8.15-r7
0.8.15-r8
0.8.15-r9
0.8.15-r10
0.8.15-r11
0.8.15-r12
0.8.15-r13
0.8.15-r14
0.8.16_rc1-r0
0.8.16-r0
0.8.16-r1
0.8.17-r0
0.8.17-r1
0.8.17-r2
0.8.17-r3
0.8.17-r4
0.8.18-r0
0.8.19-r0
0.8.20-r0
Alpine:v3.5 / irssi
Package
- Name
- irssi
- Purl
- pkg:apk/alpine/irssi?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.8.21-r0
Affected versions
0.*
0.8.12-r0
0.8.13_rc1-r0
0.8.13-r0
0.8.14-r0
0.8.14-r1
0.8.14-r2
0.8.15-r0
0.8.15-r1
0.8.15-r2
0.8.15-r3
0.8.15-r4
0.8.15-r5
0.8.15-r6
0.8.15-r7
0.8.15-r8
0.8.15-r9
0.8.15-r10
0.8.15-r11
0.8.15-r12
0.8.15-r13
0.8.15-r14
0.8.16_rc1-r0
0.8.16-r0
0.8.16-r1
0.8.17-r0
0.8.17-r1
0.8.17-r2
0.8.17-r3
0.8.17-r4
0.8.18-r0
0.8.19-r0
0.8.19-r1
0.8.20-r0
0.8.20-r1
Debian:11 / irssi
Package
- Name
- irssi
- Purl
- pkg:deb/debian/irssi?arch=source
Debian:12 / irssi
Package
- Name
- irssi
- Purl
- pkg:deb/debian/irssi?arch=source
Debian:13 / irssi
Package
- Name
- irssi
- Purl
- pkg:deb/debian/irssi?arch=source
Git / github.com/irssi/irssi
Affected ranges
- Type
- GIT
- Repo
- https://github.com/irssi/irssi
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.7.16
0.7.17
0.7.18
0.7.19
0.7.20
0.7.20.1
0.7.21
0.7.22
0.7.23
0.7.24
0.7.25
0.7.26
0.7.27
0.7.28
0.7.90
0.7.90-cvs
0.7.91
0.7.92
0.7.93
0.7.94
0.7.95
0.7.96
0.7.97
0.7.98
0.7.98.2
0.7.98.3
0.7.98.CVS
0.8.0
0.8.1
0.8.10
0.8.11
0.8.12
0.8.13
0.8.14
0.8.15
0.8.16
0.8.17
0.8.17-rc2
0.8.18
0.8.18-beta1
0.8.18-beta2
0.8.19
0.8.2
0.8.20
0.8.3
0.8.4
0.8.6
0.8.7
0.8.8
0.8.9