CVE-2017-5193

The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a message without a nick.

• CWE-476

• http://www.openwall.com/lists/oss-security/2017/01/06/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95310Third Party Advisory, VDB Entry
• https://irssi.org/security/irssi_sa_2017_01.txtPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00022.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201701-45Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/01/06/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95310Third Party Advisory, VDB Entry
• https://irssi.org/security/irssi_sa_2017_01.txtPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00022.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201701-45Third Party Advisory

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5187A Cross-Site Request Forgery (CWE-352) vulnerability in Dire…
• CVE-2017-5188The bs_worker code in open build service before 20170320 fol…5
• CVE-2017-5189NetIQ iManager before 3.0.3 delivered a SSL private key in a…4.3
• CVE-2017-5190NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 H…
• CVE-2017-5191An XSS vulnerability on the /NAGErrors URI in NetIQ Access M…
• CVE-2017-5192When using the local_batch client from salt-api in SaltStack…
• CVE-2017-5194Use-after-free vulnerability in Irssi before 0.8.21 allows r…
• CVE-2017-5195Irssi 0.8.17 before 0.8.21 allows remote attackers to cause …
• CVE-2017-5196Irssi 0.8.18 before 0.8.21 allows remote attackers to cause …
• CVE-2017-5197There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x befo…
• CVE-2017-5198SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo…
• CVE-2017-5199The editbanner feature in SolarWinds LEM (aka SIEM) through …