The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade inspircd | Mar 28, 2016 | Mar 24, 2016 |
| Freebsd | — | Upgrade inspircd | Dec 10, 2025 | Dec 29, 2015 |
| Gentoo Linux | — | Upgrade net-irc/inspircd. | Oct 30, 2017 | Apr 12, 2016 |
| Ubuntu | — | Upgrade inspircd | Nov 19, 2024 | Apr 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub