CVE-2009-4016

Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before…

published February 4, 2010

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a LINKS command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04026 · 90.5th percentile
Published
2010-02-04T18:00Z
EPSS history
Timeline
  • 04 FEB 18:00Z
    Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before…
    cvelistv5