← Vulnerability feed

Vulnerability record · CVE-2008-1925 · published 24 April 2008

CVE-2008-1925: Inspircd memory buffer overflow vulnerability

Inspircd · Inspircd

Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames.

5.0 CVSS 2.0 Medium EPSS 2.3% · top 17.6% CWE-119 · Memory buffer overflow
5.0CVSS 2.0 base score
2.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/29610 Vendor Advisory
http://secunia.com/advisories/30163
http://security.gentoo.org/glsa/glsa-200805-08.xml
http://www.inspircd.org/bugtrack/view_bug.php?bug_id=438
http://www.inspircd.org/forum/showthread.php?t=2945
http://www.openwall.com/lists/oss-security/2008/04/22/3
http://www.securityfocus.com/bid/28506
http://www.vupen.com/english/advisories/2008/1041/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41543
http://secunia.com/advisories/29610 Vendor Advisory
http://secunia.com/advisories/30163
http://security.gentoo.org/glsa/glsa-200805-08.xml
http://www.inspircd.org/bugtrack/view_bug.php?bug_id=438
http://www.inspircd.org/forum/showthread.php?t=2945
http://www.openwall.com/lists/oss-security/2008/04/22/3
http://www.securityfocus.com/bid/28506
http://www.vupen.com/english/advisories/2008/1041/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41543

Track CVE-2008-1925 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2012-6696Inspircd improper input validation vulnerabilityinspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-…EPSS 1.6%9.8CVE-2015-6674Inspircd memory buffer overflow vulnerabilityBuffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This iss…EPSS 2.3%8.6CVE-2015-8702Debian linux improper input validation vulnerabilityThe DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid cha…EPSS 2.3%7.5CVE-2012-1836Inspircd memory buffer overflow vulnerabilityHeap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses comp…EPSS 6.8%6.5CVE-2019-20917Inspircd null pointer dereference vulnerabilityAn issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against maria…EPSS 2.8%6.5CVE-2019-20918Inspircd use after free vulnerabilityAn issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for re…EPSS 1.5%6.5CVE-2020-25269Inspircd use after free vulnerabilityAn issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with …EPSS 2.7%5.9CVE-2016-7142Inspircd permissions and access controls vulnerabilityThe m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof ce…EPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2008-1925), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.