Inspircd
6 CVEs across 1 Inspircd products. Browse Inspircd vulnerabilities, severities, and proof-of-concept exploits.
Inspircd products with known CVEs
Inspircd CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-33586 | Medium | 4.3 | 2021-05-27 | InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issu… |
CVE-2020-25269 | Medium | 6.5 | 2020-09-11 | An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlaut… |
CVE-2019-20918 | Medium | 6.5 | 2020-09-11 | An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crash… |
CVE-2019-20917 | Medium | 6.5 | 2020-09-11 | An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connect… |
CVE-2012-6696 | Critical | 9.8 | 2017-09-25 | inspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-1836. |
CVE-2015-6674 | Critical | 9.8 | 2017-04-13 | Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists… |
CVE-2016-7142 | Medium | 5.9 | 2016-09-26 | The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate… |
CVE-2015-8702 | High | 8.6 | 2016-04-12 | The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in… |
CVE-2012-1836 | | | 2012-03-22 | Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression. |
CVE-2008-1925 | | | 2008-04-24 | Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a… |