CVE-2016-7553
LOW3.3EPSS 0.08%irssi - security update
Published: 2/27/2017Modified: 4/28/2026
Description
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
Affected packages (2)
- Debian/irssifrom 0, < 0.8.20-2
- Debian/irssifrom 0, < 0.8.15-5+deb7u1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | LOW3.3 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |