PT-2021-4282
CVE-2021-33586
·
تاريخ النشر
2021-05-26
·
تاريخ التحديث
2022-06-03
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
InspIRCd versions 3.8.0 through 3.9.x
Description
The issue is related to a problem where any user able to connect to the server can access recently deallocated memory, also known as the "malformed PONG" issue. This is due to incorrect permission assignment for a critical resource, which can allow a remote attacker to gain access to confidential data.
Recommendations
For InspIRCd versions 3.8.0 through 3.9.x, update to version 3.10.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾