UBUNTU-CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

CVE-2015-8702

The CVE-2015-8702 issue affects InspIRCd prior to 2.0.19, where the DNS::GetResult function in dns.cpp can be triggered by an invalid character in a PTR response (e.g., a "\032" whitespace) to cause a remote denial of service (netsplit). Public details describe the vulnerability and its impact as...

CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

CVE-2015-8702

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service netsplit via an invalid character in a PTR response, as demonstrated by a "\032" whitespace character in a hostname...

Debian DSA-3527-1 : inspircd - security update

It was discovered that inspircd, an IRC daemon, incorrectly handled PTR lookups of connecting users. This flaw allowed a remote attacker to crash the application by setting up malformed DNS records, thus causing a denial-of-service, %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 3527-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3527-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 24, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3527-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3527-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 24, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3527-1 (inspircd - security update)

It was discovered that inspircd, an IRC daemon, incorrectly handled PTR lookups of connecting users. This flaw allowed a remote attacker to crash the application by setting up malformed DNS records, thus causing a denial-of-service, OpenVAS Vulnerability Test $Id: deb3527.nasl 6608 2017-07-07...

DSA-3527-1 inspircd - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3527-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-384-1 : inspircd security and regression update

It was discovered that InspIRCd did not validate the names in DNS responses before using them in inter-server communication. A remote attacker controlling the reverse DNS server for an IRC client could use this for denial of service or possibly for privilege escalation on the IRC network. InspIRC...

[SECURITY] [DLA 384-1] inspircd security and regression update

Package : inspircd Version : 1.1.22+dfsg-4+squeeze3 CVE ID : CVE-2015-8702 Debian Bug : 668253 It was discovered that InspIRCd did not validate the names in DNS responses before using them in inter-server communication. A remote attacker controlling the reverse DNS server...

DLA-384-1 inspircd - security update

Bulletin has no description...

InspIRCd 'src/dns.cpp' Denial of Service Vulnerability

InspIRCd is an extensible and modular Internet Relay Chat IRC server written in C++ for Linux, BSD, Windows and Mac OS X systems. A denial of service vulnerability exists in InspIRCd. An attacker can exploit this vulnerability to crash the application and deny service to legitimate users...

GLSA-201512-13 : InspIRCd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201512-13 InspIRCd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in InspIRCd. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary co...

Gentoo Security Advisory GLSA 201512-13

Gentoo Linux Local Security Checks GLSA 201512-13 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

InspIRCd: Multiple vulnerabilities

Background InspIRCd is a modular Internet Relay Chat IRC server written in C++ which was created from scratch to be stable, modern and lightweight. Description Multiple vulnerabilities have been discovered in InspIRCd. Please review the CVE identifiers referenced below for details. Impact A remot...

FreeBSD : inspircd -- DoS (b808c3a8-ae30-11e5-b864-14dae9d210b8)

Inspircd reports : This release fixes the issues discovered since 2.0.18, containing multiple important stability and correctness related improvements, including a fix for a bug which allowed malformed DNS records to cause netsplits on a network. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Debian DLA-276-1 : inspircd security update

Adam , upstream author of inspircd found the Debian patch that fixed CVE-2012-1836 was incomplete. Furthermore, it introduced an issue, since invalid dns packets caused an infinite loop. This upload corrects these problems. As of today, no CVEs has been assigned to these Debian-specific flaws. Fo...

[SECURITY] [DLA 276-1] inspircd security update

Package : inspircd Version : 1.1.22+dfsg-4+squeeze2 Debian Bug : 780880 Adam [email protected], upstream author of inspircd found the Debian patch that fixed CVE-2012-1836 was incomplete. Furthermore, it introduced an issue, since invalid dns packets caused an infinite loop. This upload corrects the...