CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0

published September 11, 2020

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02787 · 86.3th percentile
Published
2020-09-11T04:43Z
EPSS history
Timeline
  • 11 SEP 04:43Z
    An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0
    cvelistv5