Buffer Overflow Vulnerability in UnrealIRCd Affects Server Security
CVE-2023-50784

7.5HIGH

Key Information:

Vendor

Unrealircd

Status
Unrealircd
Vendor
CVE Published:
16 December 2023

What is CVE-2023-50784?

A vulnerability in the websockets implementation of UnrealIRCd versions 6.1.0 to 6.1.3 permits an unauthenticated remote attacker to disrupt server operations by sending oversized data packets to an open websocket port. This could potentially enable remote code execution on certain older platforms, highlighting the need for immediate updates and enhanced security considerations for server administrators.

References

https://www.unrealircd.org/index/news
https://forums.unrealircd.org/viewtopic.php?t=9340
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.