Description
Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | inspircd | 1.1.18+dfsg-1 | — |
| Debian 12 | inspircd | 1.1.18+dfsg-1 | — |
References
- [oss-security] 20080422 CVE Request: inspircd mailing-list
- 29610 third-party-advisory
- ADV-2008-1041 vdb-entry
- inspircd-multiple-dos(41543) vdb-entry
- 30163 third-party-advisory
- http://www.inspircd.org/bugtrack/view_bug.php?bug_id=438
- GLSA-200805-08 vendor-advisory
- 28506 vdb-entry
- http://www.inspircd.org/forum/showthread.php?t=2945