summaryrefslogtreecommitdiff
path: root/security/irssi_sa_2017_06.txt
diff options
context:
space:
mode:
authorailin-nemui <ailin-nemui@users.noreply.github.com>2017-06-07 10:15:50 +0200
committerGitHub <noreply@github.com>2017-06-07 10:15:50 +0200
commitb57fa1d0e18711e39d0b0241f1cd676fed6ee463 (patch)
tree9ed2be4a9aeda7c1769bb3c178a0f4ccad0a1701 /security/irssi_sa_2017_06.txt
parentca96e440e64d90b65aaa6775a8c485eafb6c98f6 (diff)
downloadirssi.github.io-b57fa1d0e18711e39d0b0241f1cd676fed6ee463.zip
Update irssi_sa_2017_06.txt
add refs
Diffstat (limited to 'security/irssi_sa_2017_06.txt')
-rw-r--r--security/irssi_sa_2017_06.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/security/irssi_sa_2017_06.txt b/security/irssi_sa_2017_06.txt
index a316c4e..0d01f92 100644
--- a/security/irssi_sa_2017_06.txt
+++ b/security/irssi_sa_2017_06.txt
@@ -1,5 +1,6 @@
IRSSI-SA-2017-06 Irssi Security Advisory [1]
============================================
+CVE-2017-9468, CVE-2017-9469
Description
-----------
@@ -10,9 +11,13 @@ Two vulnerabilities have been located in Irssi.
attempt to dereference a NULL pointer. Found by Joseph
Bisch. (CWE-690)
+ CVE-2017-9468 [2] was assigned to this bug
+
(b) When receiving certain incorrectly quoted DCC files, Irssi would
try to find the terminating quote one byte before the allocated
memory. Found by Joseph Bisch. (CWE-129, CWE-127)
+
+ CVE-2017-9469 [3] was assigned to this bug
Impact
@@ -64,3 +69,5 @@ References
----------
[1] https://irssi.org/security/irssi_sa_2017_06.txt
+[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468
+[3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469