CVE-2017-9469: In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminatin...

Security readout for executives and security teams

CVE-2017-9469 affects Irssi before 1.0.3. A malformed, incorrectly quoted DCC file transfer can make the client read just before allocated memory and potentially crash. The documented impact is availability disruption of the IRC client, not data theft or code execution. Exposure is limited to systems running Irssi versions before 1.0.3, especially users who receive DCC file transfer offers from untrusted IRC users. The source bundle does not identify other affected products or CPEs. Treat this as a targeted availability risk for teams using legacy Irssi. It does not currently indicate active exploitation or compromise, but upgrading old clients is the appropriate low-friction control. Mitigation focus: Upgrade Irssi to version 1.0.3 or later.; Apply vendor or distribution security updates, such as the Debian advisory where applicable.; Check current Irssi vendor guidance before relying on compensating controls..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.