CVE catalog

CVE-2008-1501

ircd-ircu: CVE-2008-1501

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
5.25% · Oct 25, 2026

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianircd-ircusid2.10.12.19+dfsg-3not affected
Debianircd-ircuforky2.10.12.19+dfsg-3not affected
Debianircd-ircutrixie2.10.12.19+dfsg-1not affected
Debianircd-ircubookworm2.10.12.10.dfsg1-3not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianircd-ircusourcesidNot affectedunimportantNot reportedNot reported
Debianircd-ircusourceforkyNot affectedunimportantNot reportedNot reported
Debianircd-ircusourcetrixieNot affectedunimportantNot reportedNot reported
Debianircd-ircusourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ircd-ircu]Not affected

    Source package: [ircd-ircu]

    Details (2)
    • 2.10.12.10.dfsg1-3+b1 · arm64 · bookworm

      Not affected

      dsa · ircd-ircu · debian · bookworm

    • 2.10.12.10.dfsg1-3+b2 · amd64 · bookworm

      Not affected

      dsa · ircd-ircu · debian · bookworm

Observed:

References