Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-13045

28
FAUCET Score

CVE-2019-13045 is a high-severity use-after-free vulnerability affecting Irssi versions prior to 1.0.8, 1.1.3, and 1.2.1 when SASL is enabled and a SASL login is sent to the server. This flaw carries a CVSS score of 8.1 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, though with high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 0.8.18, < 1.0.8CPE matchmatch criteria
cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*
>= 1.1.0, < 1.1.3CPE matchmatch criteria
cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*
>= 1.2.0, < 1.2.1CPE matchmatch criteria
cpe:2.3:a:irssi:irssi:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

8.1HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.2
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
3.33%
Probability of exploitation in next 30 days
EPSS Percentile
87.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0333 is in the 46th percentile among its peer group of 8,920 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 17007-16817Fixed in: 1.4.5-1
microsoftpatch availablevia msrc
Product: 17007-17084Fixed in: 1.4.5-1
microsoftpatch availablevia msrc
Product: azl3 irssi 1.4.5-1 on Azure Linux 3.0Fixed in: 1.4.5-1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: irssi-0:1.1.1-3.el8
View patch

Vendor Advisories (2)

redhatCVE-2019-13045Low

irssi: use after free when sending SASL login to server

Jun 29, 2019
microsoft2019-Jun/CVE-2019-13045Important

Irssi has a use after free when sending SASL login to the server

Jun 11, 2019

References

lists.opensuse.org / opensuse-security-announce/2019-07/msg00004.html
Third Party Advisory
lists.opensuse.org / opensuse-security-announce/2019-08/msg00030.html
packetstormsecurity.com / files/153480/Slackware-Security-Advisory-irssi-Updates.html
Third Party Advisory
github.com / irssi/irssi/commit/d23b0d22cc611e43c88d99192a59f413f951a955
PatchThird Party Advisory
irssi.org / security/irssi_sa_2019_06.txt
Vendor Advisory
seclists.org / bugtraq/2019/Jun/41
Mailing ListThird Party Advisory
usn.ubuntu.com / 4046-1
openwall.com / lists/oss-security/2019/06/29/1
Mailing ListThird Party Advisory
securityfocus.com / bid/108998