An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
References
Link | Resource |
---|---|
https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea | Patch Third Party Advisory |
https://docs.inspircd.org/security/2020-01/ | Vendor Advisory |
https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9 | Patch Third Party Advisory |
https://www.debian.org/security/2020/dsa-4764 | Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html | Mailing List Third Party Advisory |
Information
Published : 2020-09-10 22:15
Updated : 2023-01-23 18:09
NVD link : CVE-2020-25269
Mitre link : CVE-2020-25269
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
debian
- debian_linux
inspircd
- inspircd