InspIRCd: Information disclosure

InspIRCd: Information disclosure An information disclosure vulnerability in InspIRCd may allow remote attackers to obtain sensitive information. inspircd 2021-07-09 2021-07-09 791589 remote 3.10.0 3.10.0

InspIRCd is a modular Internet Relay Chat (IRC) server written in C++ which was created from scratch to be stable, modern and lightweight.

InspIRCd incorrectly handled malformed PONG messages, resulting in access of freed memory.

A remote attacker could send crafted packets to the server, possibly allowing them to obtain sensitive information.

There is no known workaround at this time.

All InspIRCd users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-irc/inspircd-3.10.0"

CVE-2021-33586 sam_c sam_c