CVE-2005-0199

Опубликовано: 02 мая 2005

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

Ссылки

http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html
Broken Link
Patch
http://bugs.gentoo.org/show_bug.cgi?id=79705
Issue Tracking
http://secunia.com/advisories/14056
Broken Link
http://secunia.com/advisories/14059
Broken Link
http://securitytracker.com/id?1013047
Broken Link
Third Party Advisory
VDB Entry
http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml
Patch
Third Party Advisory
http://www.securityfocus.com/bid/12397
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19143
Third Party Advisory
VDB Entry
http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html
Broken Link
Patch
http://bugs.gentoo.org/show_bug.cgi?id=79705
Issue Tracking
http://secunia.com/advisories/14056
Broken Link
http://secunia.com/advisories/14059
Broken Link
http://securitytracker.com/id?1013047
Broken Link
Third Party Advisory
VDB Entry
http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml
Patch
Third Party Advisory
http://www.securityfocus.com/bid/12397
Broken Link
Exploit
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19143
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:barton:ngircd:*:*:*:*:*:*:*:*

Версия до 0.8.2 (исключая)

EPSS

Процентиль: 95%

0.20153

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-191

Связанные уязвимости

GHSA-q94h-vc2h-j68g