CVE-2010-1156

Publication date 14 April 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
irssi 9.10 karmic
Fixed 0.8.14-1ubuntu1.1
9.04 jaunty
Fixed 0.8.12-6ubuntu1.2
8.10 intrepid
Fixed 0.8.12-4ubuntu2.2
8.04 LTS hardy
Fixed 0.8.12-3ubuntu3.2
6.06 LTS dapper Ignored end of life

Notes

jdstrand

remotely exploitable, but hard to get timing right

References

Related Ubuntu Security Notices (USN)

    • USN-929-1
    • irssi vulnerabilities
    • 15 April 2010

Other references