| Package | Affected versions | Patched versions |
|---|---|---|
| dircproxy | ≤ 1.2.0 |
irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free