Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade irssi-develUpgrade irssi | May 4, 2022 | Jun 29, 2019 |
| Alpine Linux | — | Upgrade irssi | Jul 5, 2019 | Jun 29, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 29, 2019 |
| Centos_linux | — | Upgrade irssiUpgrade irssi-debuginfoUpgrade irssi-debugsource | Apr 29, 2020 | Jun 29, 2019 |
| Debian | — | Upgrade irssi | May 27, 2022 | Jun 29, 2019 |
| Freebsd | — | Upgrade irssi | Jul 2, 2019 | Jul 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade irssi | Aug 31, 2020 | Jun 29, 2019 |
| Oracle Solaris | — | Upgrade network/chat/irssi to version 1.1.3-11.4.12.0.1.2.0 on Solaris 11.4 | Aug 21, 2019 | Jun 29, 2019 |
| Oracle_linux | — | Upgrade irssiUpgrade irssi-devel | Jul 22, 2024 | Jun 29, 2019 |
| Redhat_linux | — | Upgrade irssi-debugsourceUpgrade irssiUpgrade irssi-debuginfoUpgrade irssi-devel | Apr 29, 2020 | Jun 29, 2019 |
| Rocky_linux | — | Upgrade irssi-debuginfoUpgrade irssiUpgrade irssi-develUpgrade irssi-debugsource | Mar 12, 2024 | Jun 29, 2019 |
| Suse | — | Upgrade irssi-develUpgrade irssi | Jul 3, 2019 | Jun 29, 2019 |
| Ubuntu | — | Upgrade irssi | Jul 5, 2019 | Jun 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub