CVE-2019-13045

Опубликовано: 29 июн. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00004.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00030.html
http://packetstormsecurity.com/files/153480/Slackware-Security-Advisory-irssi-Updates.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/29/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/108998
https://github.com/irssi/irssi/commit/d23b0d22cc611e43c88d99192a59f413f951a955
Patch
Third Party Advisory
https://irssi.org/security/irssi_sa_2019_06.txt
Vendor Advisory
https://seclists.org/bugtraq/2019/Jun/41
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4046-1/
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00004.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00030.html
http://packetstormsecurity.com/files/153480/Slackware-Security-Advisory-irssi-Updates.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/29/1
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/108998
https://github.com/irssi/irssi/commit/d23b0d22cc611e43c88d99192a59f413f951a955
Patch
Third Party Advisory
https://irssi.org/security/irssi_sa_2019_06.txt
Vendor Advisory
https://seclists.org/bugtraq/2019/Jun/41
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4046-1/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*

Версия от 0.8.18 (включая) до 1.0.8 (исключая)

cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*

Версия от 1.1.0 (включая) до 1.1.3 (исключая)

cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*

Версия от 1.2.0 (включая) до 1.2.1 (исключая)

EPSS

Процентиль: 90%

0.05965

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2019-13045

CVSS3: 8.1

ubuntu

почти 6 лет назад

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

CVE-2019-13045

CVSS3: 3.7

redhat

почти 6 лет назад

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

CVE-2019-13045

CVSS3: 8.1

msrc

около 1 месяца назад

Описание отсутствует

CVE-2019-13045

CVSS3: 8.1

debian

почти 6 лет назад

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when S ...

openSUSE-SU-2019:1690-1

suse-cvrf

почти 6 лет назад

Security update for irssi

EPSS

Процентиль: 90%

0.05965

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416