Unscored CVE-2021-33586 EUVD-2021-20272GHSA-mjhp-8mjg-4p7m

InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "…

Published May 27, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Package: inspircd Package: inspircd Ecosystem: Alpine Ecosystem: Debian

Description

InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	inspircd	3.8.1-2	—
Debian 12	inspircd	3.8.1-2	—

Alpine