UnrealIRCd updates their IRCd to 3.2.8.1
Sunday, April 26th, 2009The UnrealIRCd project released a bugfix release of version 3.2.8 and the current release is now 3.2.8.1.
The bugfix became necessary as a crash has been found in the option allow::options::noident.
In a short interview developer nate explains how the crash is being triggered and how to avoid it:
There was an issue in allow::options::noident, where if it was enabled in an allow block that a user could potentially crash a server due to a buffer overflow. As far as we’ve been able to see, there’s no risk of remote code execution as much as it just causing a segfault. The main ways of resolving it are updating to 3.2.8.1 or simply making sure no allow blocks specifically have noident (which most by default won’t thankfully).