Base Score

HIGH8.1

CVE-2019-13045

Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.

VectorNETWORK

Published Bycve@mitre.org

Published DateJun 29, 2019, 14:15

Weakness Type (CWE):CWE-416

CVSS Metrics

Base Score

8.1

Vector String

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00030.html
http://packetstormsecurity.com/files/153480/Slackware-Security-Advisory-irssi-Updates.html
http://www.openwall.com/lists/oss-security/2019/06/29/1
http://www.securityfocus.com/bid/108998
https://github.com/irssi/irssi/commit/d23b0d22cc611e43c88d99192a59f413f951a955
https://irssi.org/security/irssi_sa_2019_06.txt
https://seclists.org/bugtraq/2019/Jun/41
https://usn.ubuntu.com/4046-1/

Base Score

HIGH8.1

Weakness Type (CWE):CWE-416

CVSS Metrics

Base Score

8.1

Vector String

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH