CVE-2017-9469

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.

• CWE-119

• http://openwall.com/lists/oss-security/2017/06/06/4Mailing List, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3885Third Party Advisory
• http://www.securityfocus.com/bid/99043Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038621Third Party Advisory, VDB Entry
• https://irssi.org/security/irssi_sa_2017_06.txtPatch, Vendor Advisory
• http://openwall.com/lists/oss-security/2017/06/06/4Mailing List, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3885Third Party Advisory
• http://www.securityfocus.com/bid/99043Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038621Third Party Advisory, VDB Entry
• https://irssi.org/security/irssi_sa_2017_06.txtPatch, Vendor Advisory

Published

Jun 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9463The application Piwigo is affected by a SQL injection vulner…
• CVE-2017-9464An open redirect vulnerability is present in Piwigo 2.9 and …
• CVE-2017-9465The yr_arena_write_data function in YARA 3.6.1 allows remote…
• CVE-2017-9466The executable httpd on the TP-Link WR841N V8 router before …
• CVE-2017-9467Cross-site scripting (XSS) vulnerability in the GlobalProtec…
• CVE-2017-9468In Irssi before 1.0.3, when receiving a DCC message without …
• CVE-2017-9470In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows…
• CVE-2017-9471In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows …
• CVE-2017-9472In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows…
• CVE-2017-9473In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c all…
• CVE-2017-9474In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c al…
• CVE-2017-9475Comcast XFINITY WiFi Home Hotspot devices allow remote attac…