CVE-2020-25269: Use After Free
First published: Fri Sep 11 2020(Updated: )
An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Inspircd Inspircd | >=2.0<2.0.29 | |
| Inspircd Inspircd | >=3.0<3.6.0 | |
| Debian Debian Linux | =9.0 | |
| Debian Debian Linux | =10.0 | |
| debian/inspircd | 2.0.27-1+deb10u1 3.8.1-2 3.15.0-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://docs.inspircd.org/security/2020-01/
- https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9
- https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea
- https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html
- https://www.debian.org/security/2020/dsa-4764
- https://github.com/inspircd/inspircd/commit/07d7dea334fc56642793aa5ae1e05ae3185c474b
- https://github.com/inspircd/inspircd/commit/a9e107c646ac6d7310b55d0c2e0b06a9cec0a874
- https://github.com/inspircd/inspircd/commit/6f6fa13042f319bcd56ceed112c0a969337e4161
- https://github.com/inspircd/inspircd/commit/b3f1db9d162455af4b31edf231ba749140d37219
- https://github.com/inspircd/inspircd/commit/fbdd08043e97c2749ce2f03382559bba89abf47a
- https://github.com/inspircd/inspircd/commit/b24a91181f58c7f7141de8995ff212993bcc333b
- https://security-tracker.debian.org/tracker/CVE-2020-25269
- collector/nvd-index
- collector/security-tracker-debian
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/inspircd
- canonical/inspircd inspircd
- version/inspircd inspircd/2.0
- version/inspircd inspircd/3.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- version/debian debian linux/10.0
- package-manager/debian