PT-2017-19418

تاريخ النشر

2017-02-07

·

تاريخ التحديث

2017-02-07

الوصف من

الدرجة
N/A
غير متوفر

لا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.

Name of the Vulnerable Software and Affected Versions irssi-otr (affected versions not specified)
Description A flaw was discovered in the way irssi-otr handles data returned by libotr. After initiating an OTR session, only the first line is sent as a PRIVMSG, while additional data is sent as raw commands to the IRC server. This additional data is typically a human-readable HTML-formatted instruction message from libotr, which is a fixed string. Although this is considered a minor security concern, remediation is necessary to prevent further security issues.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
MGASA-2017-0043
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾