Vulnerability Description
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ircd-Hybrid | Ircd-Hybrid | <= 8.0.5 |
Related Weaknesses (CWE)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267
- http://osvdb.org/89623
- http://secunia.com/advisories/51948Vendor Advisory
- http://secunia.com/advisories/52106Vendor Advisory
- http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=
- http://www.debian.org/security/2013/dsa-2618
- http://www.exploit-db.com/exploits/24951
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:093
- http://www.openwall.com/lists/oss-security/2013/01/29/8
- http://www.securityfocus.com/bid/57610
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81695
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267
- http://osvdb.org/89623
- http://secunia.com/advisories/51948Vendor Advisory
FAQ
What is CVE-2013-0238?
CVE-2013-0238 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes ...
How severe is CVE-2013-0238?
CVE-2013-0238 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0238?
Check the references section above for vendor advisories and patch information. Affected products include: Ircd-Hybrid Ircd-Hybrid.