CVE-2017-15227

7.5 highEPSS 2.1%

High (7.5) in irssi irssi. EPSS 2.1% chance of exploitation in the next 30 days.

Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-after-free conditions when updating the state later on.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2017-10-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

irssi:irssi

References

http://openwall.com/lists/oss-security/2017/10/22/4
https://irssi.org/security/irssi_sa_2017_10.txt
https://lists.debian.org/debian-lts-announce/2017/12/msg00022.html
https://www.debian.org/security/2017/dsa-4016
http://openwall.com/lists/oss-security/2017/10/22/4

Check your stack JSON