Vulnerability in Ircd-Ratbox
CVE-2012-6084
modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.
EPSS: 0.030 (86.2th percentile) — read the EPSS interpretation.
Affected products
- Ircd-ratbox — versions 1.0, 1.1.1, 1.1.2
- Ratbox Ircd-ratbox
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)