CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

CVE-2019-20918

An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server...

CVE-2019-20918

CVE-2019-20918 affects InspIRCd 3.x before 3.1.0, with the silence module containing a use-after-free vulnerability that can be triggered by a user who can fully connect to the server, allowing remote crashing. The connected records confirm the issue and its impact but do not provide a remediatio...

CVE-2019-20918

An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server...

CVE-2019-20918

An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server...

CVE-2020-25269

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server...

CVE-2020-25269

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server...

CVE-2020-25269

CVE-2020-25269 is a use-after-free in InspIRCd (pgsql module) that can be triggered by combining the pgsql module with sqlauth or sqloper, enabling a remote user to crash the server. Initial description lists affected releases as InspIRCd 2 before 2.0.29 and 3 before 3.6.0. Public advisories in t...

CVE-2020-25269

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server...

InspIRCd Memory Misreference Vulnerability

InspIRCd is a modular C++ Internet Relay Chat IRC server for UNIX-like and Windows systems. A security vulnerability exists in the pgsql module in InspIRCd. When used in conjunction with the sqlauth or sqloper modules, this vulnerability can be exploited to remotely crash the InspIRCd server by a...

InspIRCd Memory Misreference Vulnerability (CNVD-2020-52890)

InspIRCd is a modular C++ Internet Relay Chat IRC server for UNIX-like and Windows systems. A security vulnerability exists in the silence module of InspIRCd. Users who can connect to the InspIRCd server can exploit the vulnerability to cause the server to crash...

InspIRCd Null Pointer Dereference Vulnerability

InspIRCd is a modular C++ Internet Relay Chat IRC server for UNIX-like and Windows systems. A security vulnerability exists in versions 2 through 2.0.28 and 3 through 3.3.0 of InspIRCd. An attacker can exploit this vulnerability to remotely crash the InspIRCd server by any user who can connect to...

CVE-2019-20917: NULL Pointer Dereference

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

CVE-2019-20918: Use After Free

An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server...

CVE-2020-25269: Use After Free

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server...

PT-2020-10874

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 3.1.0 Description A use after free issue was found in the silence module, allowing any user who can fully connect to a server to remotely crash an InspIRCd server. Recommendations For versions prior to 3.1.0, update ...

PT-2020-6766 · Inspircd +3 · Inspircd +3

Name of the Vulnerable Software and Affected Versions: InspIRCd versions prior to 2.0.29 InspIRCd versions prior to 3.6.0 Description: An issue was discovered in the pgsql module of InspIRCd, which contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this...

InspIRCd websocket module double free vulnerability

The InspIRCd development team reports: The websocket module before v3.8.1 contains a double free vulnerability. When combined with a HTTP reverse proxy this vulnerability can be used by any user who is GKZ-lined to remotely crash an InspIRCd server...

PT-2019-6268 · Inspircd +4 · Inspircd +4

Name of the Vulnerable Software and Affected Versions: InspIRCd versions prior to 2.0.28 InspIRCd versions prior to 3.3.0 Description: The issue is related to a NULL pointer dereference in the mysql module of InspIRCd when built against mariadb-connector-c 3.0.5 or newer. This can be exploited fo...