Vulnerability in Ngircd

CVE-2013-1747

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel.

EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.

Affected products

  • Ngircd — versions 20, 20.1
  • N/a — versions n/a

References