GHSA-6cq2-4j8w-7hvjHighCVSS 6.5

Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows...

Published
November 3, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

📋 Description

Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte buffer, crashing the ircd or potentially achieving remote code execution.

🔗 References (7)