Sadiecat

The issue is related to a problem where any user able to connect to the server can access recently deallocated memory, also known as the "malformed PONG" issue. This is due to incorrect permission assignment for a critical resource, which can allow a remote attacker to gain access to confidential data.

A use after free issue was found in the silence module, allowing any user who can fully connect to a server to remotely crash an InspIRCd server.

An issue was discovered in the pgsql module of InspIRCd, which contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this issue can be used for remote crashing of an InspIRCd server by any user able to connect to the server. The vulnerability is related to the use of memory after it has been freed, which can allow a remote attacker to cause a denial of service.

The issue is related to a NULL pointer dereference in the mysql module of InspIRCd when built against mariadb-connector-c 3.0.5 or newer. This can be exploited for remote crashing of an InspIRCd server by any user able to connect to it, particularly when combined with the sqlauth or sqloper modules. The vulnerability is associated with pointer dereference errors, which can allow a remote attacker to cause a denial of service.