Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2021-33586

InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.

VectorNETWORK

PublishedMay 27, 2021, 05:15

Published Bycve@mitre.org

Base Score

Score4.3

Affected Versions

No affected versions found.

References

https://docs.inspircd.org/security/2021-01/
https://github.com/inspircd/inspircd/commit/4350a11c663b0d75f8119743bffb7736d87abd4d
https://security.gentoo.org/glsa/202107-22

Weakness Type

CWE-732

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK