Red Hat Bugzilla – Bug 1459457
CVE-2017-9469 irssi: Invalid read when receiving certain incorrectly quoted DCC files
Last modified: 2017-06-13 09:26:47 EDT
When receiving certain incorrectly quoted DCC files, Irssi would try to find the terminating quote one byte before the allocated memory. A remote attacker could possibly use this to crash irssi.
Created irssi tracking bugs for this issue:
Affects: fedora-all [bug 1459458]
Lowering impact: the vulnerability allows an out of bound read 1 byte outside of the allocated memory. As shipped in RHEL, this will not cause an invalid memory access.
Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.