Improper input validation in Ircd-Hybrid

CVE-2013-0238

The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.100 (95.1th percentile) — read the EPSS interpretation.

Affected products

  • Ircd-hybrid — versions 7.2.0, 7.2.1, 7.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References