CVEvulnerability
CVE-2020-25269
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-09-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-416
Description
An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Affected configurations
• inspircd inspircd (>= 2.0 < 2.0.29)
• inspircd inspircd (>= 3.0 < 3.6.0)
• debian debian linux 9.0
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://docs.inspircd.org/security/2020-01/ Vendor Advisory
- https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9 Patch, Third Party Advisory
- https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html Mailing List, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4764 Third Party Advisory
- https://docs.inspircd.org/security/2020-01/ Vendor Advisory
- https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9 Patch, Third Party Advisory
- https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html Mailing List, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4764 Third Party Advisory