CVE-2019-20917

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 2.0.28 InspIRCd versions prior to 3.3.0

Description The issue is related to a NULL pointer dereference in the mysql module of InspIRCd when built against mariadb-connector-c 3.0.5 or newer. This can be exploited for remote crashing of an InspIRCd server by any user able to connect to it, particularly when combined with the sqlauth or sqloper modules. The vulnerability is associated with pointer dereference errors, which can allow a remote attacker to cause a denial of service.

Recommendations For InspIRCd versions prior to 2.0.28, update to version 2.0.28 or later. For InspIRCd versions prior to 3.3.0, update to version 3.3.0 or later.