Vulnerabilities > CVE-2014-5508 - Numeric Errors vulnerability in Srvx 1.3.1

CVSS 3.5 - LOW

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

srvx

CWE-189

NVD

Published: 2014-09-05

Updated: 2014-09-08

Summary

Multiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote authenticated IRCops or HelpServ bot managers to cause a denial of service (infinite loop) via a large value in the EmptyInterval parameter or certain other interval configurations.

Vulnerable Configurations

Part	Description	Count
Application	Srvx Srvx Srvx 1.3.1	1

Common Weakness Enumeration (CWE)

CWE-189 - Numeric Errors

References

http://www.openwall.com/lists/oss-security/2014/08/28/5
http://www.openwall.com/lists/oss-security/2014/08/30/1
http://www.securityfocus.com/bid/69454