CVE-2017-15722

In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string.

• CWE-125

• http://openwall.com/lists/oss-security/2017/10/22/4Mailing List, Mitigation, Patch, Third Party Advisory
• https://irssi.org/security/irssi_sa_2017_10.txtMitigation, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00022.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2017/dsa-4016Third Party Advisory
• http://openwall.com/lists/oss-security/2017/10/22/4Mailing List, Mitigation, Patch, Third Party Advisory
• https://irssi.org/security/irssi_sa_2017_10.txtMitigation, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00022.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2017/dsa-4016Third Party Advisory

Published

Oct 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15716Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15717A flaw in the way URLs are escaped and encoded in the org.ap…
• CVE-2017-15718The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can le…
• CVE-2017-15719In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, a…
• CVE-2017-15720In Apache Airflow 1.8.2 and earlier, an authenticated user c…
• CVE-2017-15721In Irssi before 1.0.5, certain incorrectly formatted DCC CTC…
• CVE-2017-15723In Irssi before 1.0.5, overlong nicks or targets may result …
• CVE-2017-15725An XML External Entity Injection vulnerability exists in Dzo…7.5
• CVE-2017-15727In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripti…
• CVE-2017-15728In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripti…
• CVE-2017-15729In phpMyFAQ before 2.9.9, there is Cross-Site Request Forger…
• CVE-2017-15730In phpMyFAQ before 2.9.9, there is Cross-Site Request Forger…