CVE-2013-0238

Published: Feb 13, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.

Affected (17)

Products: Ircd Hybrid: Ircd Hybrid

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ircd Hybrid Ircd Hybrid	Up to 8.0.5
Ircd Hybrid Ircd Hybrid	Version 7.2.0
Ircd Hybrid Ircd Hybrid	Version 7.2.1
Ircd Hybrid Ircd Hybrid	Version 7.2.2
Ircd Hybrid Ircd Hybrid	Version 7.2.3
Ircd Hybrid Ircd Hybrid	Version 7.3.0
Ircd Hybrid Ircd Hybrid	Version 7.3.0 rc1
Ircd Hybrid Ircd Hybrid	Version 7.3.1
Ircd Hybrid Ircd Hybrid	Version 8.0.0
Ircd Hybrid Ircd Hybrid	Version 8.0.0 beta1
Ircd Hybrid Ircd Hybrid	Version 8.0.0 beta2
Ircd Hybrid Ircd Hybrid	Version 8.0.0 beta3
Ircd Hybrid Ircd Hybrid	Version 8.0.0 rc1
Ircd Hybrid Ircd Hybrid	Version 8.0.1
Ircd Hybrid Ircd Hybrid	Version 8.0.2
Ircd Hybrid Ircd Hybrid	Version 8.0.3
Ircd Hybrid Ircd Hybrid	Version 8.0.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267

Source: secalert@redhat.com

http://osvdb.org/89623

Source: secalert@redhat.com

http://secunia.com/advisories/51948

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/52106

Source: secalert@redhat.com

Vendor Advisory

http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786

Source: secalert@redhat.com

http://www.debian.org/security/2013/dsa-2618

Source: secalert@redhat.com

http://www.exploit-db.com/exploits/24951

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:093

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/01/29/8

Source: secalert@redhat.com

http://www.securityfocus.com/bid/57610

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/81695

Source: secalert@redhat.com

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/89623

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51948

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/52106

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2618

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/24951

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:093

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/01/29/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/57610

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/81695

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.