Atheme Security Breach

Atheme is a set of IRC services open-sourced by Atheme. A security vulnerability exists in Atheme version 7.2.12, which stems from a memory leak contained in /atheme/src/crypto-benchmark/main.c. The vulnerability is caused by a memory leak in /atheme/src/crypto-benchmark/main.c, which contains a...

CVE-2024-27508

Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c...

CVE-2024-27508

Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c...

SUSE CVE-2017-6384

Memory leak in the loginuser function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8...

SUSE CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

openSUSE 15 Security Update : atheme (openSUSE-SU-2022:10018-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10018-1 advisory. - Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain...

OPENSUSE-SU-2022:10019-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID...

OPENSUSE-SU-2022:10018-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID Update to release 7.2.11 Add a preliminary Turkish translation Add HMAC-MD5 verify-on...

Security update for atheme (important)

openSUSE Security Update: Security update for atheme Announcement ID: openSUSE-SU-2022:10018-1 Rating: important References: 1174075 1195989 Cross-References: CVE-2022-24976 CVSS scores: CVE-2022-24976 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports...

Security update for atheme (important)

openSUSE Security Update: Security update for atheme Announcement ID: openSUSE-SU-2022:10019-1 Rating: important References: 1195989 Cross-References: CVE-2022-24976 CVSS scores: CVE-2022-24976 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Backports SLE-15-SP4...

Denial Of Service (DoS)

Atheme IRC Services is vulnerable to denial of service. When used in conjunction with InspIRCd, it allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

DEBIAN-CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

Authentication flaw

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

UBUNTU-CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

Atheme IRC Services 授权问题漏洞

Atheme IRC Services is a set of IRC services designed for large IRC networks with high scalability requirements. An authorization issue vulnerability exists in Atheme IRC Services that originates when used with InspIRCd and allows authentication to be bypassed by ending the IRC handshake at some...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...