CVE-2009-1959 : Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in i

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.

Published 2009-06-08 01:00:01

Updated 2017-08-17 01:30:35

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2009-1959

Irssi » Irssi » Version: 0.8.13
cpe:2.3:a:irssi:irssi:0.8.13:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-1959

EPSS FAQ

5.80%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 92 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1959

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2009-1959

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-1959

http://bugs.irssi.org/index.php?do=details&task_id=662

Exploit;Vendor Advisory
http://www.irssi.org/ChangeLog

<no title> - Irssi
Exploit;Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

[security-announce] SUSE Security Summary Report: SUSE-SR:2009:012 - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://www.ubuntu.com/usn/usn-800-1

USN-800-1: irssi vulnerability | Ubuntu security notices | Ubuntu
https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html

[SECURITY] Fedora 11 Update: irssi-0.8.13-3.fc11
http://www.vupen.com/english/advisories/2009/1596

Site en construction
http://www.securityfocus.com/bid/35399
https://exchange.xforce.ibmcloud.com/vulnerabilities/51184

Irssi event_wallops function denial of service CVE-2009-1959 Vulnerability Report
http://www.openwall.com/lists/oss-security/2009/05/29/3

oss-security - CVE Request (irssi)
http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/

irssi event_wallops() off-by-one Read/Write | xorl %eax, %eax
Exploit
http://www.securitytracker.com/id?1022410

Access Denied
http://www.mandriva.com/security/advisories?name=MDVSA-2009:133

Mandriva

Jump to

Vulnerability Details : CVE-2009-1959

Products affected by CVE-2009-1959

Exploit prediction scoring system (EPSS) score for CVE-2009-1959

CVSS scores for CVE-2009-1959

CWE ids for CVE-2009-1959

References for CVE-2009-1959