InspIRCd: Multiple vulnerabilities

Background InspIRCd is a modular Internet Relay Chat IRC server written in C++ which was created from scratch to be stable, modern and lightweight. Description Multiple vulnerabilities have been discovered in InspIRCd. Please review the CVE identifiers referenced below for details. Impact A remot...

FreeBSD : inspircd -- DoS (b808c3a8-ae30-11e5-b864-14dae9d210b8)

Inspircd reports : This release fixes the issues discovered since 2.0.18, containing multiple important stability and correctness related improvements, including a fix for a bug which allowed malformed DNS records to cause netsplits on a network. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Debian DLA-276-1 : inspircd security update

Adam , upstream author of inspircd found the Debian patch that fixed CVE-2012-1836 was incomplete. Furthermore, it introduced an issue, since invalid dns packets caused an infinite loop. This upload corrects these problems. As of today, no CVEs has been assigned to these Debian-specific flaws. Fo...

[SECURITY] [DLA 276-1] inspircd security update

Package : inspircd Version : 1.1.22+dfsg-4+squeeze2 Debian Bug : 780880 Adam [email protected], upstream author of inspircd found the Debian patch that fixed CVE-2012-1836 was incomplete. Furthermore, it introduced an issue, since invalid dns packets caused an infinite loop. This upload corrects the...

DLA-276-1 inspircd - security update

Bulletin has no description...

[SECURITY] [DSA 3226-1] inspircd security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...

Debian DSA-3226-1 : inspircd - security update

Adam discovered several problems in inspircd, an IRC daemon : - An incomplete patch for CVE-2012-1836 failed to adequately resolve the problem where maliciously crafted DNS requests could lead to remote code execution through a heap-based buffer overflow. - The incorrect processing of specific DN...

inspircd -- DoS

Inspircd reports: This release fixes the issues discovered since 2.0.18, containing multiple important stability and correctness related improvements, including a fix for a bug which allowed malformed DNS records to cause netsplits on a network...

[SECURITY] [DSA 3226-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3226-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3226-1 (inspircd - security update)

Adam discovered several problems in inspircd, an IRC daemon: An incomplete patch for CVE-2012-1836 failed to adequately resolve the problem where maliciously crafted DNS requests could lead to remote code execution through a heap-based buffer overflow. The incorrect processing of specific DNS...

PT-2017-5381

Name of the Vulnerable Software and Affected Versions: InspIRCd versions prior to 2.0.7 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. Recommendations: For versions prior to 2.0.7, update to version 2.0.7 or later to resolve the issue...

PT-2017-2099

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 2.0.5-1+deb7u1 for wheezy InspIRCd versions prior to 2.0.16-1 for jessie and sid Description The issue is caused by a buffer underflow in the InspIRCd module, which can be exploited by a remote attacker to cause a...

DSA-3226-1 inspircd - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3226-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201204-02 : InspIRCd: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201204-02 InspIRCd: Arbitrary code execution A vulnerability in InspIRCd allows DNS compression features to control the number of overflowed bytes sent to the heap-based buffer 'res' in dns.cpp. Impact : A remote attacker could se...

FreeBSD Ports: inspircd

The remote host is missing an update to the system as announced in the referenced advisory. VID f5f00804-a03b-11e1-a284-0023ae8e59f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID f5f00804-a03b-11e1-a284-0023ae8e59f0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: inspircd

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : inspircd -- buffer overflow (f5f00804-a03b-11e1-a284-0023ae8e59f0)

InspIRCd reports : InspIRCd contains a heap corruption vulnerability that exists in the dns.cpp code. The res buffer is allocated on the heap and can be overflowed. The res buffer can be exploited during its deallocation. The number of overflowed bytes can be controlled with DNS compression...

Debian Security Advisory DSA 2448-1 (inspircd)

The remote host is missing an update to inspircd announced via advisory DSA 2448-1. OpenVAS Vulnerability Test $Id: deb24481.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2448-1 inspircd Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...