Medium severity6.5NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026

CVE-2020-25269

Description

An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Inspircd/Inspircd2 versions
cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inspircd:inspircd:*:*:*:*:*:*:*:*range: >=2.0,<2.0.29
- (no CPE)range: <2.0.29, <3.6.0
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
InspIRCd/InspIRCddescription

Patches

Vulnerability mechanics

References

github.com/inspircd/inspircd/compare/426d1c8...b3f1db9nvdPatchThird Party Advisory
github.com/inspircd/inspircd/compare/v2.0.28...07d7deanvdPatchThird Party Advisory
docs.inspircd.org/security/2020-01/nvdVendor Advisory
lists.debian.org/debian-lts-announce/2020/09/msg00015.htmlnvdMailing ListThird Party Advisory
www.debian.org/security/2020/dsa-4764nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000