PatchTheCVEunrealircd vulnerabilities
Recent CVEs affecting unrealircd products. 7 tracked.
unrealircd has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-12-16. Highest priority: CVE-2010-2075 (score 56/100).
- CVE-2023-50784 HIGH 7.5 UPGRADE A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remot
- CVE-2017-13649 MEDIUM 5.5 UPGRADE UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might
- CVE-2016-7144 HIGH 8.1 UPGRADE The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remo
- CVE-2013-7384 MEDIUM 5.0 DOWNGRADE UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereferen
- CVE-2013-6413 MEDIUM 5.0 DOWNGRADE Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of
- CVE-2010-2075 HIGH 7.5 DOWNGRADE UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an e
- CVE-2009-4893 MEDIUM 6.8 DOWNGRADE Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote
FAQ
How do I fix unrealircd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unrealircd being exploited right now?
None of the tracked unrealircd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unrealircd CVE should I patch first?
CVE-2010-2075 currently ranks highest (56/100): UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an e.