CVE-2014-5508

Description

Multiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service (infinite loop) via a large value in the EmptyInterval parameter or certain other interval configurations.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.openwall.com/lists/oss-security/2014/08/28/5
• http://www.openwall.com/lists/oss-security/2014/08/30/1
• http://www.securityfocus.com/bid/69454
• http://www.openwall.com/lists/oss-security/2014/08/28/5
• http://www.openwall.com/lists/oss-security/2014/08/30/1
• http://www.securityfocus.com/bid/69454

CWEs

CWE-189