CVE-2020-14148: Barton Ngircd

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.

Affected products

• Barton Ngircd: up to and including 25.0; version 26.0 only
• Debian Debian Linux: version 8.0 only
• Fedoraproject Fedora: version 31 only; version 32 only

Published 2020-06-15. Last modified 2026-06-17.