The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 27, 2017 |
| Debian | — | Upgrade irssi | Jul 30, 2024 | Mar 27, 2017 |
| Freebsd | — | Upgrade irssi | Mar 23, 2017 | Mar 18, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade irssi | Nov 30, 2017 | Mar 27, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade irssi | Nov 30, 2017 | Mar 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub