CVE-2020-25269: Use After Free
An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25269?
CVE-2020-25269 is classified as a high severity vulnerability due to its potential to cause remote server crashes.
How do I fix CVE-2020-25269?
To fix CVE-2020-25269, upgrade to InspIRCd version 2.0.29 or later, or version 3.6.0 or later.
Which versions of InspIRCd are affected by CVE-2020-25269?
InspIRCd versions prior to 2.0.29 and versions prior to 3.6.0 are affected by CVE-2020-25269.
What is the primary risk associated with CVE-2020-25269?
The primary risk associated with CVE-2020-25269 is the ability for remote users to crash the InspIRCd server.
What modules need to be enabled for CVE-2020-25269 to be exploited?
The vulnerabilities in CVE-2020-25269 can be exploited when the pgsql module is used in conjunction with the sqlauth or sqloper modules.