ircd-hybrid ircd-hybrid vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid prior to 8.0.6 does not properly validate masks, which allows remote malicious users to cause a denial of service (crash) via a mask that causes a negative number to be parsed.

Ircd-hybrid Ircd-hybrid 8.0.2 Ircd-hybrid Ircd-hybrid 8.0.1 Ircd-hybrid Ircd-hybrid 7.3.0 Ircd-hybrid Ircd-hybrid Ircd-hybrid Ircd-hybrid 8.0.0 Ircd-hybrid Ircd-hybrid 7.2.0 Ircd-hybrid Ircd-hybrid 7.2.3 Ircd-hybrid Ircd-hybrid 7.2.2 Ircd-hybrid Ircd-hybrid 7.2.1 Ircd-hybrid Ircd-hybrid 8.0.4 Ircd-hybrid Ircd-hybrid 8.0.3 Ircd-hybrid Ircd-hybrid 7.3.1

1 EDB exploit

5

CVSSv2

Non-registered IRC users using (1) ircd-hybrid 7.0.1 and previous versions, (2) ircd-ratbox 1.5.1 and previous versions, or (3) ircd-ratbox 2.0rc6 and previous versions do not have a rate-limit imposed, which could allow remote malicious users to cause a denial of service by repe...

Ircd-hybrid Ircd-hybrid Ircd-ratbox Ircd-ratbox

1 EDB exploit

6.8

CVSSv2

Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox prior to 2.2.9, and (3) oftc-hybrid prior to 1.6.8, when flatten_links is disabled, allows remote malicious users to execute arbitrary code or cause a denial of serv...

5

CVSSv2

mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 up to and including 1.9.4 allows remote malicious users to cause a denial of service (daemon crash) via a ":help \t" private message to the MemoServ service.

Dinko Korunic Hybserv2 1.9.2 Dinko Korunic Hybserv2 1.9.3 Dinko Korunic Hybserv2 1.9.4

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook