{"api_version":"1","generated_at":"2026-07-23T13:46:45+00:00","cve":"CVE-2020-25269","urls":{"html":"https://cve.report/CVE-2020-25269","api":"https://cve.report/api/cve/CVE-2020-25269.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-25269","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-25269"},"summary":{"title":"CVE-2020-25269","description":"An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2020-09-11 05:15:00","updated_at":"2023-01-24 02:09:00"},"problem_types":["CWE-416"],"metrics":[],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html","name":"[debian-lts-announce] 20200920 [SECURITY] [DLA 2375-1] inspircd security update","refsource":"MLIST","tags":[],"title":"[SECURITY] [DLA 2375-1] inspircd security update","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://docs.inspircd.org/security/2020-01/","name":"https://docs.inspircd.org/security/2020-01/","refsource":"MISC","tags":["Vendor Advisory"],"title":"Security Advisory 2020-01 - InspIRCd Documentation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.debian.org/security/2020/dsa-4764","name":"DSA-4764","refsource":"DEBIAN","tags":[],"title":"Debian -- Security Information -- DSA-4764-1 inspircd","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea","name":"https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea","refsource":"MISC","tags":["Patch","Third Party Advisory"],"title":"Comparing v2.0.28...07d7dea · inspircd/inspircd · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9","name":"https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9","refsource":"MISC","tags":["Patch","Third Party Advisory"],"title":"Comparing 426d1c8...b3f1db9 · inspircd/inspircd · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25269","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25269","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"25269","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"25269","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"debian","cpe5":"debian_linux","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"25269","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"inspircd","cpe5":"inspircd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"25269","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"inspircd","cpe5":"inspircd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-25269","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://docs.inspircd.org/security/2020-01/","refsource":"MISC","name":"https://docs.inspircd.org/security/2020-01/"},{"url":"https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea","refsource":"MISC","name":"https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea"},{"url":"https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9","refsource":"MISC","name":"https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9"},{"refsource":"DEBIAN","name":"DSA-4764","url":"https://www.debian.org/security/2020/dsa-4764"},{"refsource":"MLIST","name":"[debian-lts-announce] 20200920 [SECURITY] [DLA 2375-1] inspircd security update","url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00015.html"}]}},"nvd":{"publishedDate":"2020-09-11 05:15:00","lastModifiedDate":"2023-01-24 02:09:00","problem_types":["CWE-416"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.0.29","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.6.0","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"25269","Ordinal":"186682","Title":"CVE-2020-25269","CVE":"CVE-2020-25269","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"25269","Ordinal":"1","NoteData":"An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"25269","Ordinal":"2","NoteData":"2020-09-11","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"25269","Ordinal":"3","NoteData":"2020-09-20","Type":"Other","Title":"Modified"}]}}}