CVE-2017-10966 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-10966 Interim 1 16 2023-12-08T01:27:37Z current 2021-05-30T13:58:30Z 2023-12-08T01:27:37Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-10966 An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 12 openSUSE Tumbleweed irssi-1.0.4-28.1 irssi-1.2.3-2.4 irssi-devel-1.0.4-28.1 irssi-devel-1.2.3-2.4 irssi-1.0.4-28.1 as a component of SUSE Package Hub 12 irssi-devel-1.0.4-28.1 as a component of SUSE Package Hub 12 irssi-1.2.3-2.4 as a component of openSUSE Tumbleweed irssi-devel-1.2.3-2.4 as a component of openSUSE Tumbleweed An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick while updating it. This would then result in use-after-free conditions on each access of the hash table. CVE-2017-10966 SUSE Package Hub 12:irssi-1.0.4-28.1 SUSE Package Hub 12:irssi-devel-1.0.4-28.1 openSUSE Tumbleweed:irssi-1.2.3-2.4 openSUSE Tumbleweed:irssi-devel-1.2.3-2.4 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H