CVE-2009-1959

EPSS 8.4%

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/33041unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugs.irssi.org/index.php?do=details&task_id=662 http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://secunia.com/advisories/35685 http://secunia.com/advisories/35812 http://secunia.com/advisories/36152 https://exchange.xforce.ibmcloud.com/vulnerabilities/51184 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html http://www.irssi.org/ChangeLog http://www.mandriva.com/security/advisories?name=MDVSA-2009:133 http://www.openwall.com/lists/oss-security/2009/05/29/3 http://www.securityfocus.com/bid/35399 http://www.securitytracker.com/id?1022410