{"schemaVersion":3,"id":"MGASA-2017-0393","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated irssi packages fix security vulnerabilities\n\nWhile waiting for the channel synchronization, Irssi may incorrectly\nfail to remove destroyed channels from the query list, resulting in use\nafter free conditions when updating the state later on (CVE-2017-15227).\n\nWhen installing themes with unterminated color formatting sequences,\nIrssi may access data beyond the end of the string. (CVE-2017-15228).\n\nCertain incorrectly formatted DCC CTCP messages could cause NULL pointer\ndereference (CVE-2017-15721).\n\nIn certain cases Irssi may fail to verify that a Safe channel ID is long\nenough, causing reads beyond the end of the string (CVE-2017-15722).\n\nOverlong nicks or targets may result in a NULL pointer dereference while\nsplitting the message (CVE-2017-15723).","dates":{"published":"2017-10-30T19:23:17.000Z","modified":"2026-04-16T06:22:54.539Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"irssi","name":"irssi","label":"irssi","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/irssi","purlType":"rpm","versions":[{"text":"< 0.8.21-1.3.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.21-1.3.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"irssi","name":"irssi","label":"irssi","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/irssi","purlType":"rpm","versions":[{"text":"< 1.0.5-1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.5-1.mga6","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2017-0393.html","label":"advisories.mageia.org/MGASA-2017-0393.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21918","label":"bugs.mageia.org/show_bug.cgi?id=21918","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2017/10/22/4","label":"openwall.com/lists/oss-security/2017/10/22/4","hostname":"openwall.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-15227","CVE-2017-15228","CVE-2017-15721","CVE-2017-15722","CVE-2017-15723"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-10-30T19:23:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T06:22:54.539Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T09:22:37.830Z","stale":false,"partial":false}}