PatchTheCVEunrealircd vulnerabilities and fixes
Recent CVEs affecting unrealircd, with upgrade or downgrade steps. 10 tracked.
unrealircd has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-12-16. Highest priority: CVE-2010-2075 (score 56/100).
- CVE-2023-50784 HIGH 7.5 UPGRADE A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remot
- CVE-2017-13649 MEDIUM 5.5 UPGRADE UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might
- CVE-2016-7144 HIGH 8.1 UPGRADE The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remo
- CVE-2013-7384 MEDIUM 5.0 DOWNGRADE UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereferen
- CVE-2013-6413 MEDIUM 5.0 DOWNGRADE Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of
- CVE-2010-2075 HIGH 7.5 DOWNGRADE UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an e
- CVE-2009-4893 MEDIUM 6.8 DOWNGRADE Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote
- CVE-2006-1214 MEDIUM 5.0 DOWNGRADE UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server
- CVE-2004-0679 MEDIUM 5.0 DOWNGRADE The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme t
- CVE-2002-1675 MEDIUM 6.4 DOWNGRADE Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attack
FAQ
How do I fix unrealircd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unrealircd being exploited right now?
None of the tracked unrealircd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unrealircd CVE should I patch first?
CVE-2010-2075 currently ranks highest (56/100): UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an e.