CVE-2012-1836: Buffer Overflow
First published: Thu Mar 22 2012(Updated: )
Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/inspircd | 3.8.1-2 3.15.0-1 3.17.0-1 | |
| InspIRCd | =2.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/80263
- http://secunia.com/advisories/48474
- http://www.debian.org/security/2012/dsa-2448
- http://www.kb.cert.org/vuls/id/212651
- http://www.securityfocus.com/bid/52561
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74157
- https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4
- https://security-tracker.debian.org/tracker/CVE-2012-1836
- https://github.com/inspircd/inspircd/commit/9aa28f3730fb3dd69c1e06f78bb2bbc43d36c684
- https://github.com/inspircd/inspircd/commit/ed28c1ba666b39581adb860bf51cdde43c84cc89
- https://github.com/inspircd/inspircd/blob/v2.0.7/src/dns.cpp
- https://security-tracker.debian.org/tracker/source-package/inspircd
- http://wiki.debian.org/LTS/Development
- https://anonscm.debian.org/viewvc/secure-testing/data/dla-needed.txt?view=markup
- http://www.freexian.com/services/debian-lts.html
- http://debian-handbook.info/get/
- https://github.com/Adam-/inspircd/commit/e953a402add27edfbb31337ee6510b79462
- https://github.com/Adam-/inspircd/commits/debian7
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- collector/debian-bugs
- source/Debian
- alias/CVE-2012-1836
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- collector/security-tracker-debian
- agent/software-canonical-lookup
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/debian
- vendor/inspircd
- canonical/inspircd
- version/inspircd/2.0.5