{"api_version":"1","generated_at":"2026-07-23T05:02:01+00:00","cve":"CVE-2017-9469","urls":{"html":"https://cve.report/CVE-2017-9469","api":"https://cve.report/api/cve/CVE-2017-9469.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-9469","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-9469"},"summary":{"title":"CVE-2017-9469","description":"In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2017-06-07 01:29:00","updated_at":"2019-03-14 19:07:00"},"problem_types":["CWE-119"],"metrics":[],"references":[{"url":"http://www.debian.org/security/2017/dsa-3885","name":"DSA-3885","refsource":"DEBIAN","tags":["Third Party Advisory"],"title":"Debian -- Security Information -- DSA-3885-1 irssi","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/99043","name":"99043","refsource":"BID","tags":["Third Party Advisory","VDB Entry"],"title":"Irssi CVE-2017-9469 Denial of Service Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1038621","name":"1038621","refsource":"SECTRACK","tags":["Third Party Advisory","VDB Entry"],"title":"Irssi DCC Message and File Processing Flaws Let Remote Users Cause the Target Application to Crash - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2017/06/06/4","name":"http://openwall.com/lists/oss-security/2017/06/06/4","refsource":"CONFIRM","tags":["Mailing List","Patch","Third Party Advisory"],"title":"oss-security - FYI: Irssi Security Advisory 2017/06","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://irssi.org/security/irssi_sa_2017_06.txt","name":"https://irssi.org/security/irssi_sa_2017_06.txt","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9469","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9469","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"9469","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"9469","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"9469","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"9469","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"9469","vulnerable":"1","versionEndIncluding":"1.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"irssi","cpe5":"irssi","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2017-9469","qid":"500261","title":"Alpine Linux Security Update for irssi"},{"cve":"CVE-2017-9469","qid":"504025","title":"Alpine Linux Security Update for irssi"}]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2017-9469","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"DSA-3885","refsource":"DEBIAN","url":"http://www.debian.org/security/2017/dsa-3885"},{"name":"http://openwall.com/lists/oss-security/2017/06/06/4","refsource":"CONFIRM","url":"http://openwall.com/lists/oss-security/2017/06/06/4"},{"name":"https://irssi.org/security/irssi_sa_2017_06.txt","refsource":"CONFIRM","url":"https://irssi.org/security/irssi_sa_2017_06.txt"},{"name":"99043","refsource":"BID","url":"http://www.securityfocus.com/bid/99043"},{"name":"1038621","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038621"}]}},"nvd":{"publishedDate":"2017-06-07 01:29:00","lastModifiedDate":"2019-03-14 19:07:00","problem_types":["CWE-119"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5},"severity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"9469","Ordinal":"106486","Title":"CVE-2017-9469","CVE":"CVE-2017-9469","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"9469","Ordinal":"1","NoteData":"In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"9469","Ordinal":"2","NoteData":"2017-06-06","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"9469","Ordinal":"3","NoteData":"2017-11-03","Type":"Other","Title":"Modified"}]}}}