Vulnerabilities > CVE-2019-5882 - Use After Free vulnerability in multiple products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 | |
| OS | 4 |
Common Weakness Enumeration (CWE)
Nessus
NASL family Huawei Local Security Checks NASL id EULEROS_SA-2019-1066.NASL description According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.(CVE-2019-5882) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-05-06 modified 2019-03-08 plugin id 122689 published 2019-03-08 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/122689 title EulerOS 2.0 SP5 : irssi (EulerOS-SA-2019-1066) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_D38BBB7914F311E99CE228D244AEE256.NASL description Irssi reports : Use after free when hidden lines were expired from the scroll buffer. It may affect the stability of Irssi. (CWE-417, CWE-825) last seen 2020-03-18 modified 2019-01-11 plugin id 121087 published 2019-01-11 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121087 title FreeBSD : irssi -- Use after free (d38bbb79-14f3-11e9-9ce2-28d244aee256) NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-3862-1.NASL description It was discovered that Irssi incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-03-18 modified 2019-01-18 plugin id 121244 published 2019-01-18 reporter Ubuntu Security Notice (C) 2019-2020 Canonical, Inc. / NASL script (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121244 title Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : irssi vulnerability (USN-3862-1) NASL family Fedora Local Security Checks NASL id FEDORA_2019-A171D0D192.NASL description This is an update fixing CVE-2019-5882. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-03-18 modified 2019-01-23 plugin id 121322 published 2019-01-23 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121322 title Fedora 29 : irssi (2019-a171d0d192) NASL family Slackware Local Security Checks NASL id SLACKWARE_SSA_2019-011-01.NASL description New irssi packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. last seen 2020-03-17 modified 2019-01-14 plugin id 121144 published 2019-01-14 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121144 title Slackware 14.0 / 14.1 / 14.2 / current : irssi (SSA:2019-011-01) NASL family Fedora Local Security Checks NASL id FEDORA_2019-920924ED23.NASL description This is an update fixing CVE-2019-5882. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-03-18 modified 2019-01-23 plugin id 121320 published 2019-01-23 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121320 title Fedora 28 : irssi (2019-920924ed23) NASL family SuSE Local Security Checks NASL id OPENSUSE-2019-48.NASL description This update for irssi fixes the following issues : - CVE-2019-5882: Use after free when hidden lines were expired from the scroll buffer (boo#1121396) This update to the 1.1.2 version also fixes a number of stability issues and bugs. last seen 2020-05-31 modified 2019-01-14 plugin id 121155 published 2019-01-14 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/121155 title openSUSE Security Update : irssi (openSUSE-2019-48) NASL family Huawei Local Security Checks NASL id EULEROS_SA-2019-1093.NASL description According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.(CVE-2019-5882) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-05-06 modified 2019-03-26 plugin id 123106 published 2019-03-26 reporter This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/123106 title EulerOS 2.0 SP3 : irssi (EulerOS-SA-2019-1093)