Buffer Overflow Vulnerability in Solanum IRC Daemon by Solanum IRC
CVE-2026-121603

8.5HIGH

Key Information:

Vendor

Solanum-ircd

Status
Solanum
Vendor
CVE Published:
3 November 2026

What is CVE-2026-121603?

The Solanum IRC Daemon contains a buffer overflow vulnerability within the ms_kill() function, allowing attackers with control over rogue or compromised peer servers to manipulate memory. By sending an excessively long kill reason that exceeds the predetermined limit, an attacker can overflow a static 512-byte buffer. This may lead to the unintended crashing of the ircd or potentially enable remote code execution. It's crucial for users of the Solanum IRC Daemon to apply the necessary updates to safeguard against such threats.

Affected Version(s)

solanum 0 < 2ea1382e4262b212a91034258c466f0f6754cd61

References

https://github.com/solanum-ircd/solanum/pull/550
issue-trackingpatch
https://github.com/solanum-ircd/solanum/commit/2ea1382e42...
patch
https://github.com/solanum-ircd/solanum/blob/7bc7e34c0471...
technical-description

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tristan Madani (Talence Security)
aaronmdjones
.