An information disclosure vulnerability in InspIRCd may allow remote attackers to obtain sensitive information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-irc/inspircd | * | < 3.10.0 | >= 3.10.0 |
InspIRCd is a modular Internet Relay Chat (IRC) server written in C++ which was created from scratch to be stable, modern and lightweight.
InspIRCd incorrectly handled malformed PONG messages, resulting in access of freed memory.
A remote attacker could send crafted packets to the server, possibly allowing them to obtain sensitive information.
There is no known workaround at this time.
All InspIRCd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-irc/inspircd-3.10.0"
Multiple vulnerabilities have been found in InspIRCd, the worst allowing remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-irc/inspircd | * | < 2.0.20 | >= 2.0.20 |
InspIRCd is a modular Internet Relay Chat (IRC) server written in C++ which was created from scratch to be stable, modern and lightweight.
Multiple vulnerabilities have been discovered in InspIRCd. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All InspIRCd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-irc/inspircd-2.0.20"
A heap-based buffer overflow in InspIRCd may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-irc/inspircd | * | < 2.0.5-r1 | >= 2.0.5-r1 |
InspIRCd (Inspire IRCd) is a modular C++ IRC daemon
A vulnerability in InspIRCd allows DNS compression features to control the number of overflowed bytes sent to the heap-based buffer "res[]" in dns.cpp.
A remote attacker could send specially crafted DNS responses, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All InspIRCd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-irc/inspircd-2.0.5-r1"
A buffer overflow in InspIRCd allows remote attackers to cause a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-irc/inspircd | * | < 1.1.19 | >= 1.1.19 |
InspIRCd (Inspire IRCd) is a modular C++ IRC daemon.
The "namesx" and "uhnames" modules do not properly validate network input, leading to a buffer overflow.
A remote attacker can send specially crafted IRC commands to the server, causing a Denial of Service.
Unload the "uhnames" module in the InspIRCd configuration.
All InspIRCd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-irc/inspircd-1.1.19"