[ GLSA 202107-22 ] InspIRCd

[GLSA]

Gentoo Linux Security Advisory

Title: InspIRCd: Information disclosure (GLSA 202107-22)
Severity: low
Exploitable: remote
Date: 2021-07-09
Bug(s): #791589
ID: 202107-22

Synopsis

An information disclosure vulnerability in InspIRCd may allow
remote attackers to obtain sensitive information.


Background

InspIRCd is a modular Internet Relay Chat (IRC) server written in C++
which was created from scratch to be stable, modern and lightweight.


Affected Packages

Package: net-irc/inspircd
Vulnerable: < 3.10.0
Unaffected: >= 3.10.0
Architectures: All supported architectures


Description

InspIRCd incorrectly handled malformed PONG messages, resulting in
access of freed memory.


Impact

A remote attacker could send crafted packets to the server, possibly
allowing them to obtain sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All InspIRCd users should upgrade to the latest version: