Remote Denial of Service Vulnerability in UnrealIRCd by UnrealIRCd Team
CVE-2013-7384

Currently unrated

Key Information:

Vendor

Unrealircd

Status
Unrealircd
Vendor
CVE Published:
19 May 2014

What is CVE-2013-7384?

A vulnerability in UnrealIRCd 3.2.10 prior to version 3.2.10.2 allows attackers to induce a denial of service condition. This occurs through a NULL pointer dereference related to unhandled SSL operations, which can lead to server crashes. The issue highlights potential risks for users of affected versions, who should consider upgrading to the latest release to safeguard against such attacks.

References

http://seclists.org/oss-sec/2013/q4/379
mailing-listx_refsource_MLIST
http://forums.unrealircd.com/viewtopic.php?f=2&t=8221
x_refsource_CONFIRM
http://www.unrealircd.com/txt/unreal3_2_10_2_release_note...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.