An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0"
},
{
"fixed": "3.1.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "7b47de3c194f239c5fea09a0e49696c9af017d51"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "bcd65de1ec4bb71591ae417fee649d7ecd37cd57"
}
],
"source": "REFERENCES_COMMIT"
}
]
}