CVE-2020-25269

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 2.0.29 InspIRCd versions prior to 3.6.0

Description An issue was discovered in the pgsql module of InspIRCd, which contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this issue can be used for remote crashing of an InspIRCd server by any user able to connect to the server. The vulnerability is related to the use of memory after it has been freed, which can allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 2.0.29, update to version 2.0.29 or later. For versions prior to 3.6.0, update to version 3.6.0 or later. As a temporary workaround, consider disabling the pgsql module, as well as the sqlauth or sqloper modules, until a patch is available.