diff options
| author | Jason Unovitch <junovitch@FreeBSD.org> | 2017-01-07 23:07:46 +0000 |
|---|---|---|
| committer | Jason Unovitch <junovitch@FreeBSD.org> | 2017-01-07 23:07:46 +0000 |
| commit | c1433a201b2e8ab05de881e0e6bc009a4694ca1f (patch) | |
| tree | 8c732287e0c53aa1fd117a3121d31fa1337d5355 /security | |
| parent | c32a8540937ef2b9fcc3807939d5f490b4e9ee7a (diff) | |
| download | freebsd-ports-c1433a201b2e8ab05de881e0e6bc009a4694ca1f.zip | |
Tag irssi entry with assigned CVEs, while here wrap at 80 and reference PR
PR: 215800
Security: CVE-2017-5193
Security: CVE-2017-5194
Security: CVE-2017-5195
Security: CVE-2017-5196
Security: https://vuxml.FreeBSD.org/freebsd/3d6be69b-d365-11e6-a071-001e67f15f5a.html
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 20 |
1 files changed, 15 insertions, 5 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index b294624fb298..326db13b70ff 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -192,21 +192,31 @@ Notes: <blockquote cite="https://irssi.org/security/irssi_sa_2017_01.txt"> <p>Four vulnerabilities have been located in Irssi</p> <ul> - <li>A NULL pointer dereference in the nickcmp function found by Joseph Bisch. (CWE-690)</li> - <li>Use after free when receiving invalid nick message (Issue #466, CWE-146)</li> - <li>Out of bounds read in certain incomplete control codes found by Joseph Bisch. (CWE-126)</li> - <li>Out of bounds read in certain incomplete character sequences found by Hanno Böck and independently by J. Bisch. (CWE-126)</li> + <li>A NULL pointer dereference in the nickcmp function found by + Joseph Bisch. (CWE-690)</li> + <li>Use after free when receiving invalid nick message (Issue #466, + CWE-146)</li> + <li>Out of bounds read in certain incomplete control codes found + by Joseph Bisch. (CWE-126)</li> + <li>Out of bounds read in certain incomplete character sequences + found by Hanno Böck and independently by J. Bisch. (CWE-126)</li> </ul> <p>These issues may result in denial of service (remote crash).</p> </blockquote> </body> </description> <references> - <url>https://irssi.org/security/irssi_sa_2017_01.txt</url> + <cvename>CVE-2017-5193</cvename> + <cvename>CVE-2017-5194</cvename> + <cvename>CVE-2017-5195</cvename> + <cvename>CVE-2017-5196</cvename> + <freebsdpr>ports/215800</freebsdpr> + <url>https://irssi.org/security/irssi_sa_2017_01.txt</url> </references> <dates> <discovery>2017-01-03</discovery> <entry>2017-01-05</entry> + <modified>2017-01-07</modified> </dates> </vuln> |