Irssi 'WALLOPS' Message Off By One Heap Memory Corruption Vulnerability

Bugtraq ID:	35399
Class:	Boundary Condition Error
CVE:	CVE-2009-1959
Remote:	Yes
Local:	No
Published:	May 15 2009 12:00AM
Updated:	May 07 2015 05:01PM
Credit:	nemo
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE openSUSE 10.3 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 irssi irssi 0.8.13 irssi irssi 0.8.11 irssi irssi 0.8.9 irssi irssi 0.8.8 irssi irssi 0.8.7 irssi irssi 0.8.6 irssi irssi 0.8.5 irssi irssi 0.8.4 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 IA-32 - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Mandriva Linux Mandrake 8.2 - Mandriva Linux Mandrake 8.1 ia64 - Mandriva Linux Mandrake 8.1 - Mandriva Linux Mandrake 8.0 ppc - Mandriva Linux Mandrake 8.0 - RedHat Linux 7.3 i386 - RedHat Linux 7.2 ia64 - RedHat Linux 7.2 i386 - RedHat Linux 7.1 i386 - S.u.S.E. Linux 8.0 i386 - S.u.S.E. Linux 7.3 i386 - S.u.S.E. Linux 7.2 i386 irssi irssi 0.8.10rc5 Gentoo Linux
Not Vulnerable:

Irssi 'WALLOPS' Message Off By One Heap Memory Corruption Vulnerability

Irssi is prone to an off-by-one, heap-based, memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into a memory buffer.

Attackers can exploit this issue to crash the vulnerable client, resulting in a denial-of-service condition. Given the nature of this issue, attackers may also be able to run arbitrary code within the context of the vulnerable application, but this has not been confirmed.

Iirssi 0.8.13 is vulnerable; other versions may also be affected.

Irssi 'WALLOPS' Message Off By One Heap Memory Corruption Vulnerability

An attacker may exploit this issue by enticing a victim into connecting to a malicious server.

The following example IRC command is available; please see the references for more information.

: WALLOPS \001ACTION

Irssi 'WALLOPS' Message Off By One Heap Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva irssi-0.8.12-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-3.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva irssi-0.8.12-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-3.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva irssi-0.8.12-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-4.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu irssi-dev_0.8.12-3ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-3ubuntu3.1_ powerpc.deb


• Ubuntu irssi_0.8.12-3ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-3ubuntu3.1_powe rpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu irssi-dev_0.8.12-4ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-4ubuntu2.1_ powerpc.deb


• Ubuntu irssi_0.8.12-4ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-4ubuntu2.1_powe rpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu irssi-dev_0.8.12-3ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-3ubuntu3.1_ sparc.deb


• Ubuntu irssi_0.8.12-3ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-3ubuntu3.1_spar c.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu irssi-dev_0.8.12-4ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-4 ubuntu2.1_i386.deb


• Ubuntu irssi_0.8.12-4ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-4ubun tu2.1_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu irssi-dev_0.8.10-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.10-1 ubuntu1.1_sparc.deb


• Ubuntu irssi-text_0.8.10-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-text_0.8.10- 1ubuntu1.1_sparc.deb


• Ubuntu irssi_0.8.10-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.10-1ubun tu1.1_sparc.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva irssi-0.8.11-1.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.11-1.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.11-1.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu irssi-dev_0.8.12-3ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-3 ubuntu3.1_amd64.deb


• Ubuntu irssi_0.8.12-3ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-3ubun tu3.1_amd64.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu irssi-dev_0.8.10-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.10-1 ubuntu1.1_powerpc.deb


• Ubuntu irssi-text_0.8.10-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-text_0.8.10- 1ubuntu1.1_powerpc.deb


• Ubuntu irssi_0.8.10-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.10-1ubun tu1.1_powerpc.deb

Mandriva Linux Mandrake 2008.0

• Mandriva irssi-0.8.11-1.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.11-1.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.11-1.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu irssi-dev_0.8.12-6ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-6ubuntu1.1_ sparc.deb


• Ubuntu irssi_0.8.12-6ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-6ubuntu1.1_spar c.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu irssi-dev_0.8.12-6ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-6ubuntu1.1_ powerpc.deb


• Ubuntu irssi_0.8.12-6ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-6ubuntu1.1_powe rpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu irssi-dev_0.8.12-3ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-3ubuntu3.1_ lpia.deb


• Ubuntu irssi_0.8.12-3ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-3ubuntu3.1_lpia .deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu irssi-dev_0.8.10-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.10-1 ubuntu1.1_i386.deb


• Ubuntu irssi-text_0.8.10-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-text_0.8.10- 1ubuntu1.1_i386.deb


• Ubuntu irssi_0.8.10-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.10-1ubun tu1.1_i386.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu irssi-dev_0.8.12-4ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-4ubuntu2.1_ lpia.deb


• Ubuntu irssi_0.8.12-4ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-4ubuntu2.1_lpia .deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu irssi-dev_0.8.10-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.10-1 ubuntu1.1_amd64.deb


• Ubuntu irssi-text_0.8.10-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-text_0.8.10- 1ubuntu1.1_amd64.deb


• Ubuntu irssi_0.8.10-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.10-1ubun tu1.1_amd64.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu irssi-dev_0.8.12-6ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-6 ubuntu1.1_i386.deb


• Ubuntu irssi_0.8.12-6ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-6ubun tu1.1_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu irssi-dev_0.8.12-4ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-4ubuntu2.1_ sparc.deb


• Ubuntu irssi_0.8.12-4ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-4ubuntu2.1_spar c.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu irssi-dev_0.8.12-6ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi-dev_0.8.12-6ubuntu1.1_ lpia.deb


• Ubuntu irssi_0.8.12-6ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/i/irssi/irssi_0.8.12-6ubuntu1.1_lpia .deb

Mandriva Linux Mandrake 2009.0

• Mandriva irssi-0.8.12-3.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-3.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-3.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu irssi-dev_0.8.12-3ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-3 ubuntu3.1_i386.deb


• Ubuntu irssi_0.8.12-3ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-3ubun tu3.1_i386.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva irssi-0.8.12-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu irssi-dev_0.8.12-6ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-6 ubuntu1.1_amd64.deb


• Ubuntu irssi_0.8.12-6ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-6ubun tu1.1_amd64.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu irssi-dev_0.8.12-4ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi-dev_0.8.12-4 ubuntu2.1_amd64.deb


• Ubuntu irssi_0.8.12-4ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/i/irssi/irssi_0.8.12-4ubun tu2.1_amd64.deb

Mandriva Linux Mandrake 2009.1

• Mandriva irssi-0.8.12-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.12-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-perl-0.8.12-4.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0 x86_64

• Mandriva irssi-0.8.9-2.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.9-2.1.C30mdk.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 3.0

• Mandriva irssi-0.8.9-2.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva irssi-devel-0.8.9-2.1.C30mdk.i586.rpm
  http://www.mandriva.com/en/download/

Irssi 'WALLOPS' Message Off By One Heap Memory Corruption Vulnerability

References:

• FS#662 - event_wallops() underflow resulting in out of bounds read/write. (nemo)
  
• irssi event_wallops() off-by-one Read/Write (xorl)
  
• irssi Home Page (irssi)