CVE-2020-14148

CVE-2020-14148 affects ngIRCd. Multiple sources confirm that ngIRCd prior to 26~rc2 has a vulnerability in the Server-Server protocol implementation, allowing an out-of-bounds access demonstrated by the IRC_NJOIN() function. Impact details in the sources align with partial availability disruption...

CVE-2005-0199

ngIRCd is vulnerable to an integer underflow in Lists_MakeMask() in lists.c. In all versions before 0.8.2, a long MODE line can trigger an incorrect length calculation, causing a buffer overflow that enables a remote attacker to crash the server and possibly execute arbitrary code. The issue is c...

CVE-2013-5580

CVE-2013-5580 affects ngIRCd versions 18 through 20.2. The vulnerability arises in conn.c: Conn_StartLogin and cb_Read_Resolver_Result when NoticeAuth is enabled, where the return code of Handle_Write is not properly handled. This can cause a denial of service via assertion failure and server cra...