IRCD-Hybrid 'try_parse_v4_netmask()' Denial of Service Vulnerability

Bugtraq ID:	57610
Class:	Input Validation Error
CVE:	CVE-2013-0238
Remote:	Yes
Local:	No
Published:	Jan 29 2013 12:00AM
Updated:	Apr 12 2013 04:58PM
Credit:	Bob Nomnomnom
Vulnerable:	IRCD-Hybrid ircd-hybrid 7.2.2 IRCD-Hybrid ircd-hybrid 7.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

IRCD-Hybrid 'try_parse_v4_netmask()' Denial of Service Vulnerability

IRCD-Hybrid is prone to a denial-of-service vulnerability.

Successful exploits of this issue allow an attacker to crash the affected application, denying service to legitimate users.

Versions prior to IRCD-Hybrid 8.6 are vulnerable.

IRCD-Hybrid 'try_parse_v4_netmask()' Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

The following exploit code is available:

• /data/vulnerabilities/exploits/57610.pl

IRCD-Hybrid 'try_parse_v4_netmask()' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

IRCD-Hybrid 'try_parse_v4_netmask()' Denial of Service Vulnerability

References:

• IRCD-Hybrid Homepage (IRCD-Hybrid)