Vulnerability in Ircd-Hybrid
CVE-2009-4016
Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a LINKS command.
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Ircd-hybrid — versions 7.2.3, 7.2.2
- Ircd-ratbox — versions 1.1.1, 2.2.6, 1.3.2
- Oftc Oftc-hybrid — versions 1.6.2, 1.5.1, 1.6.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
- cve@mitre.org (vdb-entry, x_refsource_BID)