[arch-security] [ASA-201711-19] konversation: denial of service
foxboron at archlinux.org
Tue Nov 14 15:13:49 UTC 2017
Arch Linux Security Advisory ASA-201711-19
Date : 2017-11-12
CVE-ID : CVE-2017-15923
Package : konversation
Type : denial of service
Remote : Yes
Link : https://security.archlinux.org/AVG-489
The package konversation before version 1.7.3-1 is vulnerable to denial
Upgrade to 1.7.3-1.
# pacman -Syu "konversation>=1.7.3-1"
The problem has been fixed upstream in version 1.7.3.
Go to Interface -> Colors in the Configure Konversation dialog and
uncheck Allow Colored Text in IRC Messages (near the bottom)
A denial of service vulnerability has been discovered in Konversation
before 1.7.3 when handling colors in IRC messages. Any malicious user
connected to the same IRC network could send a carefully crafted
message that would crash the Konversation user client.
A remote attacker is able to craft messages that can result in the
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the arch-security