← Back

Barton

barton

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Ngircd
ngircd

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Barton
DebianFedoraproject
3Debian Linux
FedoraNgircd
Jun 17, 2026
Jun 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.
1Barton
1Ngircd
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the Handle_Write fu...Show more
The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the Handle_Write function, which allows remote attackers to cause a denial of service (assertion failure and server crash) via unspecified vectors, related to a "notice auth" message not being sent to a new client.Show less
1Barton
1Ngircd
Apr 16, 2026
May 2, 2005
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that...Show more
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.Show less