Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Ubuntu 17.10 USN-3590-1 Critical: Irssi Denial of Service Alerts

ubuntu
Calendar Grey March 6, 2018
Scroller Ubuntu
Several critical security flaws found in Irssi for Ubuntu 14.04, 16.04, and 17.10 necessitate urgent patches and updates.
Several security issues were fixed in Irssi.

Summary

Several security issues were fixed in Irssi.

Software Description:

- irssi: terminal based IRC client

Details:

It was discovered that Irssi incorrectly handled certain empty

nick names. An attacker could possibly use this issue to cause a denial

of service. (CVE-2018-7050)

It was discovered that Irssi incorrectly handled certain nick names.

An attacker could possibly use this to access sensitive information.

(CVE-2018-7051)

It was discovered that Irssi incorrectly handled an increase in the

number of windows. An attacker could possibly use this issue to cause

a denial of service. (CVE-2018-7052)

It was discovered that Irssi incorrectly handled certain messages.

An attacker could possibly use this issue to cause a denial of service

or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS

and Ubuntu 17.10. (CVE-2018-7053)

It was discovered that Irssi incorrectly handled certain

disconnections. An attacker could possibly use this to cause a...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu Irssi

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
  irssi                           1.0.4-1ubuntu2.3

Ubuntu 16.04 LTS:
  irssi                           0.8.19-1ubuntu1.7

Ubuntu 14.04 LTS:
  irssi                           0.8.15-5ubuntu3.5

After a standard system update you need to restart Irssi to make all
the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3590-1

  CVE-2018-7050, CVE-2018-7051, CVE-2018-7052, CVE-2018-7053,

  CVE-2018-7054, CVE-2018-7073

Severity
critical
Lowest
Low
Medium
High
Critical

March 06, 2018

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu Irssi

Package Information

  https://launchpad.net/ubuntu/+source/irssi/1.0.4-1ubuntu2.3
  https://launchpad.net/ubuntu/+source/irssi/0.8.19-1ubuntu1.7
  https://launchpad.net/ubuntu/+source/irssi/0.8.15-5ubuntu3.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.