CVE-2015-8702

Published April 12th, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.8

HIGH

Affected

PROJECT

Description

The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a "\032" (whitespace) character in a hostname.

inspircd/inspircd

A high-performance Internet Relay Chat (IRCv3) server for UNIX-like and Windows systems

GitHub

1.33K