Critical severity9.1NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026
CVE-2022-24976
CVE-2022-24976
Description
Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- Atheme/IRC Servicesdescription
- Range: <7.2.12
- osv-coords5 versionspkg:rpm/opensuse/atheme&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/atheme&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/atheme&distro=openSUSE%20Tumbleweedpkg:rpm/suse/atheme&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/atheme&distro=SUSE%20Package%20Hub%2015%20SP4
< 7.2.12-bp153.2.3.1+ 4 more
- (no CPE)range: < 7.2.12-bp153.2.3.1
- (no CPE)range: < 7.2.12-bp154.2.3.1
- (no CPE)range: < 7.2.12-2.1
- (no CPE)range: < 7.2.12-bp153.2.3.1
- (no CPE)range: < 7.2.12-bp154.2.3.1
Patches
Vulnerability mechanics
References
3- github.com/atheme/atheme/commit/4e664c75d0b280a052eb8b5e81aa41944e593c52nvdPatchThird Party Advisory
- github.com/atheme/atheme/compare/v7.2.11...v7.2.12nvdPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2022/01/30/4nvdExploitMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.