Irssi CVE-2019-13045 Denial of Service Vulnerability

Bugtraq ID:	108998
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-13045
Remote:	Yes
Local:	No
Published:	Jun 29 2019 12:00AM
Updated:	Jun 29 2019 12:00AM
Credit:	Ilbelkyr
Vulnerable:	irssi irssi 1.2 irssi irssi 1.1.2 irssi irssi 1.1.1 irssi irssi 1.1 irssi irssi 1.0.7 irssi irssi 1.0.6 irssi irssi 1.0.5 irssi irssi 1.0.4 irssi irssi 1.0.3 irssi irssi 1.0.2 irssi irssi 1.0.1 irssi irssi 1.0 irssi irssi 0.8.21 irssi irssi 0.8.20 irssi irssi 0.8.19 irssi irssi 0.8.18 irssi irssi 0.8.9 irssi irssi 0.8.6 irssi irssi 0.8.5 irssi irssi 1.0
Not Vulnerable:	irssi irssi 1.2.1 irssi irssi 1.1.3 irssi irssi 1.0.8

Irssi CVE-2019-13045 Denial of Service Vulnerability

Irssi is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to instability, denying service to legitimate users.

This issue is fixed in:

Irssi 1.0.8, 1.1.3, and 1.2.1

Irssi CVE-2019-13045 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Irssi CVE-2019-13045 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Irssi CVE-2019-13045 Denial of Service Vulnerability

References:

• Irssi 1.2.1/1.1.3/1.0.8: CVE-2019-13045 (IRSSI)
  
• Irssi Homepage (Irssi)
  
• Merge pull request #1058 from ailin-nemui/sasl-reconnect (IRSSI)
  
• IRSSI-SA-2019-06 Irssi Security Advisory [1] (IRSSI)