NVD

Id
36594  
Name
CVE-2013-0238  
Description
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-02-12  
Modified Date
2014-02-06  
Seq
2013-0238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186966 36594 CVE-2013-0238 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267  View
186967 36594 CVE-2013-0238 http://svn.ircd-hybrid.org:8000/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786  View
186968 36594 CVE-2013-0238 DSA-2618  View
186969 36594 CVE-2013-0238 24951  View
186970 36594 CVE-2013-0238 MDVSA-2013:093  View
186971 36594 CVE-2013-0238 [oss-security] 20130129 ircd-hybrid: Denial of service vulnerability in hostmask.c:try_parse_v4_netmask()  View
186972 36594 CVE-2013-0238 57610  View
186973 36594 CVE-2013-0238 ircdhybrid-tryparsev4netmask-dos(81695)  View
186974 36594 CVE-2013-0238 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19974 JVNDB-2013-001549 IRCD-Hybrid におけるサービス運用妨害 (クラッシュ) の脆弱性 IRCD-Hybrid の hostmask.c の try_parse_v4_netmask 関数は、マスクを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2013-0238 60180 CVE-2013-0238 36594 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001549.html 2013-02-13 2014-02-27 View