CVE-2017-6384
HighSummary
A memory leak in the login_user function in saslserv/main.c in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This issue is fixed in version 7.2.8.
Risk Assessment
An attacker can exploit this vulnerability to remotely trigger a denial of service, potentially leading to system downtime.
Recommendation
It is recommended to upgrade to Atheme version 7.2.8 or later to mitigate this vulnerability.
Other vulnerabilities in Atheme 7.2.7
See all- CVE-2016-4478High
Buffer overflow in the xmlrpc_char_encode function in Atheme before version 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.
- CVE-2014-9773High
Atheme before version 7.2.7 has a vulnerability that allows remote attackers to modify Anope FLAGS behavior by registering and dropping nicknames using the (1) LIST, (2) CLEAR, or (3) MODIFY keywords.
Original NVD description (English source)
Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.