CVE Daily – UnrealIRCd https://cvedaily.com/pages/tags/unrealircd.html CVE Daily – UnrealIRCd en Wed, 03 Jun 2026 21:27:08 +0000 [High] CVE-2023-50784 – A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 a... https://nvd.nist.gov/vuln/detail/CVE-2023-50784 https://nvd.nist.gov/vuln/detail/CVE-2023-50784 Sat, 16 Dec 2023 23:15:40 +0000 High CVE-2023-50784

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possible on some uncommon, older platforms.

CVSS: 7.5 · CWE: CWE-120

View on NVD

]]> [Medium] CVE-2017-13649 – UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a ... https://nvd.nist.gov/vuln/detail/CVE-2017-13649 https://nvd.nist.gov/vuln/detail/CVE-2017-13649 Wed, 23 Aug 2017 21:29:00 +0000 Medium CVE-2017-13649

UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command. NOTE: the vendor indicates that there is no common or recommended scenario in which a root script would exe…

CVSS: 5.5 · CWE: CWE-665

View on NVD

]]> [High] CVE-2016-7144 – The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 an... https://nvd.nist.gov/vuln/detail/CVE-2016-7144 https://nvd.nist.gov/vuln/detail/CVE-2016-7144 Wed, 18 Jan 2017 17:59:00 +0000 High CVE-2016-7144

The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.

CVSS: 8.1 · CWE: CWE-287

View on NVD

]]> [Medium] CVE-2013-7384 – UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of s... https://nvd.nist.gov/vuln/detail/CVE-2013-7384 https://nvd.nist.gov/vuln/detail/CVE-2013-7384 Mon, 19 May 2014 14:55:10 +0000 Medium CVE-2013-7384

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types.

CVSS: 5.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2013-6413 – Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote ... https://nvd.nist.gov/vuln/detail/CVE-2013-6413 https://nvd.nist.gov/vuln/detail/CVE-2013-6413 Mon, 19 May 2014 14:55:09 +0000 Medium CVE-2013-6413

Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was assigned for the NULL pointer dereference.

CVSS: 5.0 · CWE: CWE-399

View on NVD

]]> [High] CVE-2010-2075 – UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 th... https://nvd.nist.gov/vuln/detail/CVE-2010-2075 https://nvd.nist.gov/vuln/detail/CVE-2010-2075 Tue, 15 Jun 2010 14:04:26 +0000 High CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2009-4893 – Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noid... https://nvd.nist.gov/vuln/detail/CVE-2009-4893 https://nvd.nist.gov/vuln/detail/CVE-2009-4893 Tue, 15 Jun 2010 14:04:26 +0000 Medium CVE-2009-4893

Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

CVSS: 6.8 · CWE: CWE-119

View on NVD

]]> [Medium] CVE-2006-1214 – UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of servi... https://nvd.nist.gov/vuln/detail/CVE-2006-1214 https://nvd.nist.gov/vuln/detail/CVE-2006-1214 Tue, 14 Mar 2006 01:06:00 +0000 Medium CVE-2006-1214

UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands, as demonstrated by "TKL - q\x08Q *\x08PoC."

CVSS: 5.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2004-0679 – The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions... https://nvd.nist.gov/vuln/detail/CVE-2004-0679 https://nvd.nist.gov/vuln/detail/CVE-2004-0679 Fri, 06 Aug 2004 04:00:00 +0000 Medium CVE-2004-0679

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

CVSS: 5.0 · CWE: N/A

View on NVD

]]>