Secunia

Erik Sperling Johansen has reported a vulnerability in IRCD-Hybrid and ircd-ratbox, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error within the socket dequeuing mechanism and can be exploited by establishing an unregistered connection and sending multiple newlines.

Successful exploitation consumes a large amount of available memory resources.

The vulnerability reportedly affect the following versions:
* ircd-hybrid 7.0.1 and prior.
* ircd-ratbox 1.5.1 and prior.
* ircd-ratbox 2.0rc6 and prior.

Solution
The vulnerability has reportedly been fixed in ircd-ratbox versions 1.5.2 and 2.0rc7.
Further details available in Customer Area

Provided and/or discovered by
Erik Sperling Johansen

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area