CVE-2015-8702

HIGH8.6EPSS 0.76%

inspircd - security update

Published: 4/12/2016Modified: 3/9/2026

Also known as:DSA-3527-1DEBIAN-CVE-2015-8702

Description

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.

Affected packages (3)

Debian/inspircdfrom 0, < 2.0.20-1
Debian/inspircdfrom 0, < 1.1.22+dfsg-4+squeeze3
Debian/inspircdfrom 0, < 2.0.5-1+deb7u2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-8702