CVE-2021-33586

    Dashboard / Vulnerabilities / CVE-2021-33586

    CVE-2021-33586

    Published: 27 May 2021Last Modified: 8 Jul 2026

    Summary:

    Details: InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.

    References: https://security.gentoo.org/glsa/202107-22, https://docs.inspircd.org/security/2021-01/, https://github.com/inspircd/inspircd/commit/4350a11c663b0d75f8119743bffb7736d87abd4d

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d38595e7e14e7509e744d33df657d50d00cc201f
    Fixed -6ff8f38a6d55970af1400cc78994e017ca351c39

    Affected versions

    v3.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-33586 | CVE-DB