Bug 920264 (CVE-2023-50784)

Summary:	net-irc/unrealircd: denial-of-service by sending an oversized packet
Product:	Gentoo Security	Reporter:	Christopher Fore <csfore>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	kensington, sam
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://forums.unrealircd.org/viewtopic.php?t=9340
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---

Description Christopher Fore 2023-12-18 14:21:35 UTC

CVE-2023-50784 (https://forums.unrealircd.org/viewtopic.php?t=9340):

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possible on some uncommon, older platforms.