Improper input validation in Dircproxy

CVE-2007-5226

irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.