CVE-2017-10965

An issue was discovered in Irssi before 1.0.4

published July 7, 2017

CVSS
โ€”
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

โš ๏ธ A pesky little dereference issue could trip up your Irssi client! When messages show invalid timestamps, it sends Irssi spiraling into a NULL pointer tango. ๐Ÿ˜ฑ Think of it like a librarian trying to read a book that has no pages โ€“ it just can't figure out where to go next! This error in Irssi leads to a confusing and potentially disruptive situation. While the severity is marked as UNKNOWN, a NULL pointer dereference can crash the application, leaving you high and dry during crucial conversations. Imagine being in the middle of a heated debate and poof โ€“ your client crashes! That's the risk here.

Put simply

Think of it like a librarian trying to read a book that has no pages โ€“ it just can't figure out where to go next! This error in Irssi leads to a confusing and potentially disruptive situation. This vulnerability arises in Irssi versions before 1.0.4, where receiving messages with invalid timestamps causes the application to attempt dereferencing a NULL pointer, leading to a potential crash.

What to do

While the severity is marked as UNKNOWN, a NULL pointer dereference can crash the application, leaving you high and dry during crucial conversations. Imagine being in the middle of a heated debate and poof โ€“ your client crashes! That's the risk here. To avoid running into this unexpected crash, upgrade Irssi to at least version 1.0.4. Keeping your software up-to-date is always a good practice to ensure a smoother experience! You've got this! By updating, you'll keep your chat safe and sound. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03443 ยท 88.9th percentile
Published
2017-07-07T14:00Z
EPSS history
Timeline
  • 07 JUL 14:00Z
    An issue was discovered in Irssi before 1.0.4
    cvelistv5