Remote Yes

Type Denial of service

Description

A use-after-free vulnerability has been found in irssi before 1.1.2, when hidden lines were expired from the scroll buffer.

AVG-847 irssi 1.1.1-2 1.1.2-1 Low Fixed

11 Jan 2019 ASA-201901-8 AVG-847 irssi Low denial of service

https://marc.info/?l=oss-security&m=154711952322177
https://irssi.org/security/irssi_sa_2019_01.txt
https://github.com/irssi/irssi/pull/948

Apparently fixed in PR 948, not sure why 919 is referenced here? Fixed

Note that this bug will never be triggered if lines are never hidden (no usage of /window hidelevel).