CVE-2018-5205

HIGH

Irssi <1.0.6 - Use After Free

Title source: llm
STIX 2.1

Description

When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.

References (3)

Scores

CVSS v3 7.5
EPSS 0.0070
EPSS Percentile 72.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-134
Status published
Products (6)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 17.04
canonical/ubuntu_linux 17.10
debian/debian_linux 9.0
irssi/irssi < 1.0.6
Published Jan 06, 2018
Tracked Since Feb 18, 2026