CVE-2018-7053

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are received in an unexpected order.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-15

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Ubuntu Linux (Canonical)
• Debian Linux (Debian)
• Irssi (Irssi)

References

• http://openwall.com/lists/oss-security/2018/02/15/1
• https://irssi.org/security/irssi_sa_2018_02.txt
• https://usn.ubuntu.com/3590-1/
• https://www.debian.org/security/2018/dsa-4162