Test ID:	1.3.6.1.4.1.25623.1.0.843030
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-3184-1)
Summary:	The remote host is missing an update for the 'irssi' package(s) announced via the USN-3184-1 advisory.
Description:	Summary: The remote host is missing an update for the 'irssi' package(s) announced via the USN-3184-1 advisory. Vulnerability Insight: It was discovered that the Irssi buf.pl script set incorrect permissions. A local attacker could use this issue to retrieve another user's window contents. (CVE-2016-7553) Joseph Bisch discovered that Irssi incorrectly handled comparing nicks. A remote attacker could use this issue to cause Irssi to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-5193) It was discovered that Irssi incorrectly handled invalid nick messages. A remote attacker could use this issue to cause Irssi to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-5194) Joseph Bisch discovered that Irssi incorrectly handled certain incomplete control codes. A remote attacker could use this issue to cause Irssi to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2017-5195) Hanno Bock and Joseph Bisch discovered that Irssi incorrectly handled certain incomplete character sequences. A remote attacker could use this issue to cause Irssi to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2017-5196) Hanno Bock discovered that Irssi incorrectly handled certain format strings. A remote attacker could use this issue to cause Irssi to crash, resulting in a denial of service. (CVE-2017-5356) Affected Software/OS: 'irssi' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 16.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7553 BugTraq ID: 93155 http://www.securityfocus.com/bid/93155 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/ http://www.openwall.com/lists/oss-security/2016/09/24/1 http://www.openwall.com/lists/oss-security/2016/09/26/4 Common Vulnerability Exposure (CVE) ID: CVE-2017-5193 BugTraq ID: 95310 http://www.securityfocus.com/bid/95310 https://security.gentoo.org/glsa/201701-45 https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html http://www.openwall.com/lists/oss-security/2017/01/06/1 Common Vulnerability Exposure (CVE) ID: CVE-2017-5194 Common Vulnerability Exposure (CVE) ID: CVE-2017-5195 Common Vulnerability Exposure (CVE) ID: CVE-2017-5196 Common Vulnerability Exposure (CVE) ID: CVE-2017-5356 BugTraq ID: 96581 http://www.securityfocus.com/bid/96581 https://blog.fuzzing-project.org/55-Fuzzing-Irssi-with-Perl-Scripts.html http://www.openwall.com/lists/oss-security/2017/01/12/8 http://www.openwall.com/lists/oss-security/2017/01/13/2
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.