oss-sec mailing list archives

Inspircd <2.0.19 DoS

From: Mark Felder <feld () feld me>
Date: Tue, 29 Dec 2015 07:32:07 -0600

Inspircd <2.0.19 has a DoS caused by PTR lookup of connecting users.

From their changelog: "...including a fix for a bug which allowed

malformed DNS records to cause netsplits on a network. Triggering this
issue is non-trivial and it may not occur in all circumstances, but all
users are advised to upgrade."

http://www.inspircd.org/2015/04/16/v2019-released.html

Relevant commit:
https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559

-- 
  Mark Felder
  feld () feld me

Current thread:

Inspircd <2.0.19 DoS Mark Felder (Dec 29)
- Re: Inspircd <2.0.19 DoS cve-assign (Dec 29)