Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Gentoo: GLSA 200909-13 High Severity: Irssi Arbitrary Code Execution

gentoo
Calendar Grey September 12, 2009
Dist Gentoo Esm H88
Gentoo advisory GLSA 202210-15 highlights a critical vulnerability in wget, posing risks of remote code execution due to an integer overflow.
A remotely exploitable off-by-one error leading to a heap overflow was found in irssi which might result in the execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200909-13 https://security.gentoo.org/ Severity: High Title: irssi: Execution of arbitrary code Date: September 12, 2009 Bugs: #271875 ID: 200909-13

Synopsis ======= A remotely exploitable off-by-one error leading to a heap overflow was found in irssi which might result in the execution of arbitrary code.
Background ========= irssi is a modular textUI IRC client with IPv6 support.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-irc/irssi < 0.8.13-r1 >= 0.8.13-r1
========== Nemo discovered an off-by-one error leading to a heap overflow in irssi's event_wallops() parsing function.
Impact ===== A remote attacker might ent...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here