Approved changes feed: RSS · Atom

cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInspircd (9bf4cb4b-a1d4-5c38-88df-4a5bf8fc9160)
ProductInspircd (06891e59-cbf0-5d52-9e5f-e8c798281280)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/inspircd purl2cpe 2026-06-01 10:14:49.729940
pkg:deb/ubuntu/inspircd purl2cpe 2026-06-01 10:14:49.729944
pkg:github/inspircd/inspircd purl2cpe 2026-06-01 10:14:49.729948

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33586 vulnerable 2026-06-08 05:32:11.836178 Details available
InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.
Published: 2021-05-27T05:00:36.000Z
Updated: 2024-08-03T23:50:43.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25269 vulnerable 2026-06-08 05:22:36.662891 Details available
An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Published: 2020-09-11T04:43:32.000Z
Updated: 2024-08-04T15:33:05.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20918 vulnerable 2026-06-08 05:13:41.762493 Details available
An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server.
Published: 2020-09-11T04:43:40.000Z
Updated: 2024-08-05T03:00:17.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20917 vulnerable 2026-06-08 05:13:41.762000 Details available
An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
Published: 2020-09-11T04:43:48.000Z
Updated: 2024-08-05T03:00:18.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7142 vulnerable 2026-06-08 05:08:11.939067 Details available
The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message.
Published: 2016-09-26T15:00:00.000Z
Updated: 2024-08-06T01:50:47.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8702 vulnerable 2026-06-08 05:07:04.728916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6674 vulnerable 2026-06-08 05:06:52.919854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6696 vulnerable 2026-06-08 05:03:01.571702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1925 vulnerable 2026-06-08 04:50:22.324204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.