UN
Product
UnrealIRCd
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add UnrealIRCd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-7144 | 8.1 | Jan 18 | The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log… Affected: through 3.2.10.5; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.3.1; +2 more |
| CVE-2026-90668 | 7.5 | Sep 13 | The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory… Affected: 6.0.5 before 6.2.7 |
| CVE-2023-50784 | 7.5 | Dec 16 | A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a… Affected: 6.1.0 before 6.1.4 |
| CVE-2017-13649 | 5.5 | Aug 23 | UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to… Affected: through 4.0.13 |
| CVE-2013-7384 | – | May 19 | UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL Affected: 3.2.10; 3.2.10.1 |
| CVE-2013-6413 | – | May 19 | Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors Affected: 3.2.10; 3.2.10.1 |
| CVE-2010-2075 | – | Jun 15 | UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the… Affected: 3.2.8.1 |
| CVE-2009-4893 | – | Jun 15 | Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 3.2; 3.2.1; 3.2.1; 3.2.1; 3.2.2; 3.2.2; +25 more |
Showing 8