CVE-2008-1501: Ircu

Medium severity, CVSS 5.0. EPSS: 5.2% chance of exploitation in the next 30 days.

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.

Affected products

• Ircu Ircu: up to and including 2.10.12.12
• Quakenet Snircd: up to and including 1.3.4

Published 2008-03-25. Last modified 2026-06-16.