Lucene search

K
freebsdFreeBSDF5F00804-A03B-11E1-A284-0023AE8E59F0
HistoryMar 19, 2012 - 12:00 a.m.

inspircd -- buffer overflow

2012-03-1900:00:00
vuxml.freebsd.org
16

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.154 Low

EPSS

Percentile

95.9%

InspIRCd reports:

InspIRCd contains a heap corruption vulnerability that exists in the
dns.cpp code. The res[] buffer is allocated on the heap and can be
overflowed. The res[] buffer can be exploited during its deallocation.
The number of overflowed bytes can be controlled with DNS compression
features.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchinspircd= 1.2UNKNOWN
FreeBSDanynoarchinspircd< 1.2.9UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.154 Low

EPSS

Percentile

95.9%