Описание
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ngircd | fixed | 26-1 | package | |
| ngircd | postponed | buster | package | |
| ngircd | no-dsa | stretch | package |
Примечания
https://github.com/ngircd/ngircd/issues/274
https://github.com/ngircd/ngircd/issues/277
https://github.com/ngircd/ngircd/pull/275
https://github.com/ngircd/ngircd/pull/276
https://github.com/ngircd/ngircd/commit/02cf31c0e267a4c9a7656d43ad3ad4eeb37fc9c5
Связанные уязвимости
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.