inspircd - DNS PTR Lookup Remote Crash
Summary
DSA-3527-1: inspircd - security update. Affects inspircd versions < 2.0.5-1+deb7u2. Fixed in 2.0.5-1+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
InspIRCd is an IRC daemon that provides a stable and scalable platform for hosting IRC networks. It offers various features and customization options for administrators and users. However, a vulnerability has been discovered in inspircd that affects its handling of PTR lookups of connecting users. This flaw allows a remote attacker to crash the application by setting up malformed DNS records, leading to a denial-of-service.
Vulnerability Detail
The vulnerability in inspircd arises from its improper handling of PTR lookups during the connection process. By exploiting this flaw, an attacker can manipulate DNS records in a way that triggers a crash in the application. This can be achieved by crafting malformed PTR records and initiating connections to the affected inspircd server. The crash caused by the vulnerability results in a denial-of-service condition, rendering the IRC network inaccessible to legitimate users.
How To Fix
Minimum fixed version
2.0.5-1+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade inspircdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The inspircd IRC daemon is vulnerable to a remote crash caused by improper handling of PTR lookups. This vulnerability can be exploited by an attacker to render the IRC network inaccessible. To mitigate the issue, administrators should upgrade their inspircd packages to the fixed versions provided by Debian. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for inspircd →
FAQ
InspIRCd is an IRC daemon that provides a stable and scalable platform for hosting IRC networks. It offers various features and customization options for administrators and users.
The vulnerability allows a remote attacker to crash the inspircd application by setting up malformed DNS records. This results in a denial-of-service condition, rendering the IRC network inaccessible to legitimate users.
You can use Vulert's playground (https://vulert.com/scanner) to check if your inspircd installation is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
No specific workarounds have been provided for this vulnerability. It is recommended to upgrade the inspircd package to the fixed version.
You can find more information about this vulnerability in the Debian Security Advisory DSA-3527-1 (https://storage.googleapis.com/debian-osv/dsa-osv/DSA-3527-1.json).
Related vulnerabilities
Recent vulnerabilities recorded for inspircd.
