Description
channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel.
References
- 91836 vdb-entry
- FEDORA-2013-4593 vendor-advisory
- [ngIRCd-ML] 20130217 ngIRCd 20.2 mailing-list
- https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git%3Bh=0e63fb3fa7ac4ca048e8c2b648d2be3fd0572311
- http://ngircd.barton.de/doc/NEWS
- 52982 third-party-advisory
- [ngIRCd-ML] 20130215 ngIRCd 20.2 mailing-list