Security
Security
An information disclosure vulnerability in InspIRCd may allow remote attackers to obtain sensitive information.
| Package | net-irc/inspircd on all architectures |
|---|---|
| Affected versions | < 3.10.0 |
| Unaffected versions | >= 3.10.0 |
InspIRCd is a modular Internet Relay Chat (IRC) server written in C++ which was created from scratch to be stable, modern and lightweight.
InspIRCd incorrectly handled malformed PONG messages, resulting in access of freed memory.
A remote attacker could send crafted packets to the server, possibly allowing them to obtain sensitive information.
There is no known workaround at this time.
All InspIRCd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-irc/inspircd-3.10.0"
Release date
July 09, 2021
Latest revision
July 09, 2021: 1
Severity
low
Exploitable
remote
Bugzilla entries