← Vulnerability feed

Vulnerability record · CVE-2012-1836 · published 22 March 2012

CVE-2012-1836: Inspircd memory buffer overflow vulnerability

Inspircd · Inspircd

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.

7.5 CVSS 2.0 High EPSS 6.8% · top 6.2% CWE-119 · Memory buffer overflow
7.5CVSS 2.0 base score
6.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/80263
http://secunia.com/advisories/48474
http://www.debian.org/security/2012/dsa-2448
http://www.kb.cert.org/vuls/id/212651 PatchUS Government Resource
http://www.securityfocus.com/bid/52561
https://exchange.xforce.ibmcloud.com/vulnerabilities/74157
https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4 ExploitPatch
http://osvdb.org/80263
http://secunia.com/advisories/48474
http://www.debian.org/security/2012/dsa-2448
http://www.kb.cert.org/vuls/id/212651 PatchUS Government Resource
http://www.securityfocus.com/bid/52561
https://exchange.xforce.ibmcloud.com/vulnerabilities/74157
https://github.com/inspircd/inspircd/commit/fe7dbd2c104c37f6f3af7d9f1646a3c332aea4a4 ExploitPatch

Track CVE-2012-1836 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2012-6696Inspircd improper input validation vulnerabilityinspircd in Debian before 2.0.7 does not properly handle unsigned integers. NOTE: This vulnerability exists because of an incomplete fix to CVE-2012-…EPSS 1.6%9.8CVE-2015-6674Inspircd memory buffer overflow vulnerabilityBuffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This iss…EPSS 2.3%8.6CVE-2015-8702Debian linux improper input validation vulnerabilityThe DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid cha…EPSS 2.3%6.5CVE-2019-20917Inspircd null pointer dereference vulnerabilityAn issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against maria…EPSS 2.8%6.5CVE-2019-20918Inspircd use after free vulnerabilityAn issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for re…EPSS 1.5%6.5CVE-2020-25269Inspircd use after free vulnerabilityAn issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with …EPSS 2.7%5.9CVE-2016-7142Inspircd permissions and access controls vulnerabilityThe m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof ce…EPSS 1.1%5.0CVE-2008-1925Inspircd memory buffer overflow vulnerabilityBuffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon cr…EPSS 2.3%

Source: NIST National Vulnerability Database (record CVE-2012-1836), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.