Use-after-free in InspIRCd - CVE-2020-25269
Published: September 11, 2020 / Updated: September 20, 2020
Vulnerability identifier: #VU46820
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-25269
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to crash the daemon.
The vulnerability exists due to a use-after-free error within the pgsql module in InspIRCd. A remote user can send specially crafted request to the daemon, trigger a use-after-free error and crash the server..
Successful exploitation of the vulnerability requires that sqlauth or sqloper modules are used.
Affected software
InspIRCd
inspircd (Debian package)
inspircd (Debian package)
How to mitigate CVE-2020-25269
Install updates from vendor's website.
InspIRCd - addressed in versions 2.0.29, 3.6.0
inspircd (Debian package) - update to 2.0.27-1+deb10u1
inspircd (Debian package) - update to 2.0.27-1+deb10u1