CVE-2017-15722

En ciertos casos, Irssi en versiones anteriores a la 1.0.5 podría fracasar a la hora de verificar si un ID de canal seguro es lo suficientemente largo, provocando lecturas más allá del final de la cadena.

Brian Carpenter discovered that Irssi incorrectly handled messages with invalid time stamps. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. Brian Carpenter discovered that Irssi incorrectly handled the internal nick list. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. Joseph Bisch discovered that Irssi incorrectly removed destroyed channels from the query list. A malicious IRC server could use this issue to cause Irssi to crash, resulting in a denial of service. Various other issues were also addressed.