Strix
26.1K

CVE-2012-6084

UnknownEPSS 3.05%

Last modified

CVE-2012-6084 is a vulnerability of currently unknown severity. modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.. EPSS estimates a 3.05% chance of exploitation in the next 30 days.

Description

modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.

Metrics

EPSS Probability
3.05%

85.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
Ircd-RatboxIrcd-Ratbox1.0—
Ircd-RatboxIrcd-Ratbox1.1.1—
Ircd-RatboxIrcd-Ratbox1.1.2—
Ircd-RatboxIrcd-Ratbox1.2.1—
Ircd-RatboxIrcd-Ratbox1.2.2—
Ircd-RatboxIrcd-Ratbox1.2.3—
Ircd-RatboxIrcd-Ratbox1.3—
Ircd-RatboxIrcd-Ratbox1.3.1—
Ircd-RatboxIrcd-Ratbox1.3.2—
Ircd-RatboxIrcd-Ratbox1.4—
Ircd-RatboxIrcd-Ratbox1.5—
Ircd-RatboxIrcd-Ratbox1.5.1—
Ircd-RatboxIrcd-Ratbox1.5.2—
Ircd-RatboxIrcd-Ratbox1.5.3—
Ircd-RatboxIrcd-Ratbox2.0.1—
Ircd-RatboxIrcd-Ratbox2.0.2—
Ircd-RatboxIrcd-Ratbox2.0.3—
Ircd-RatboxIrcd-Ratbox2.0.4—
Ircd-RatboxIrcd-Ratbox2.0.5—
Ircd-RatboxIrcd-Ratbox2.0.6—
Ircd-RatboxIrcd-Ratbox2.0.7—
Ircd-RatboxIrcd-Ratbox2.0.8—
Ircd-RatboxIrcd-Ratbox2.0.9—
Ircd-RatboxIrcd-Ratbox2.0.10—
Ircd-RatboxIrcd-Ratbox2.0.11—
Ircd-RatboxIrcd-Ratbox2.1.0Beta1
Ircd-RatboxIrcd-Ratbox2.1.1—
Ircd-RatboxIrcd-Ratbox2.1.2—
Ircd-RatboxIrcd-Ratbox2.1.3—
Ircd-RatboxIrcd-Ratbox2.1.4—
Ircd-RatboxIrcd-Ratbox2.1.5—
Ircd-RatboxIrcd-Ratbox2.1.6—
Ircd-RatboxIrcd-Ratbox2.1.7—
Ircd-RatboxIrcd-Ratbox2.1.8—
Ircd-RatboxIrcd-Ratbox2.2.0—
Ircd-RatboxIrcd-Ratbox2.2.1—
Ircd-RatboxIrcd-Ratbox2.2.2—
Ircd-RatboxIrcd-Ratbox2.2.3—
Ircd-RatboxIrcd-Ratbox2.2.4—
Ircd-RatboxIrcd-Ratbox2.2.5—
Ircd-RatboxIrcd-Ratbox2.2.6—
Ircd-RatboxIrcd-Ratbox2.2.7—
Ircd-RatboxIrcd-Ratbox2.2.7.1—
Ircd-RatboxIrcd-Ratbox2.2.8—
Ircd-RatboxIrcd-Ratbox2.2.9—
RatboxIrcd-Ratbox<= 3.0.7—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-6084?
modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.
How severe is CVE-2012-6084?
Severity scoring for CVE-2012-6084 is pending analysis. The EPSS model estimates a 3.05% probability of exploitation in the next 30 days.
How do I fix CVE-2012-6084?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-6084?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST