Unscored CVE-2013-7049 EUVD-2013-6848GHSA-rj4x-5f2j-h52p

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote …

Published Dec 23, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message.

References

https://code.google.com/p/znc-msvc/
[oss-security] 20131211 CVE Request: ZNC IRC Bouncer DoS in FiSH Plugin mailing-list
fish-cve20137049-dos(89671) vdb-entry
64254 vdb-entry
100859 vdb-entry
[oss-security] 20131212 Re: CVE Request: ZNC IRC Bouncer DoS in FiSH Plugin mailing-list