CVE-2012-6697

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2015/dsa-3226Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880Patch, Third Party Advisory
https://github.com/inspircd/inspircd/commit/58c893e834ff20495d00770922Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201512-13Patch, Third Party Advisory
http://www.debian.org/security/2015/dsa-3226Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880Patch, Third Party Advisory
https://github.com/inspircd/inspircd/commit/58c893e834ff20495d00770922Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201512-13Patch, Third Party Advisory

Timeline

Published: Apr 13, 2017
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-66987.5The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a craft CVE-2012-66997.5The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafte CVE-2012-67007.5The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a deni CVE-2012-67017.8Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified o CVE-2012-67025.9Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-dependent attackers t CVE-2012-67037.8Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before CVE-2012-67047.8The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which CVE-2012-67056.1Cross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.CVE-2012-67069.8A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and CVE-2012-67077.5WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values CVE-2012-67086.1jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from CVE-2012-67095.9ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.