Description
A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possible on some uncommon, older platforms.
References
- https://www.unrealircd.org/index/news
- https://forums.unrealircd.org/viewtopic.php?t=9340
- FEDORA-2023-41f41fbb69 vendor-advisory
- FEDORA-2023-7c6c696102 vendor-advisory