# CVEs published 2018-01-06

4 CVEs were published on January 6, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-5205](https://cve.now/CVE-2018-5205.md): When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string. (no CVSS)
- [CVE-2018-5206](https://cve.now/CVE-2018-5206.md): When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer. (no CVSS)
- [CVE-2018-5207](https://cve.now/CVE-2018-5207.md): When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string. (no CVSS)
- [CVE-2018-5208](https://cve.now/CVE-2018-5208.md): In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-01-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.