PT-2017-19418
تاريخ النشر
2017-02-07
·
تاريخ التحديث
2017-02-07
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
Name of the Vulnerable Software and Affected Versions
irssi-otr (affected versions not specified)
Description
A flaw was discovered in the way irssi-otr handles data returned by libotr. After initiating an OTR session, only the first line is sent as a PRIVMSG, while additional data is sent as raw commands to the IRC server. This additional data is typically a human-readable HTML-formatted instruction message from libotr, which is a fixed string. Although this is considered a minor security concern, remediation is necessary to prevent further security issues.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾