CVE-2006-6811

6.5 mediumEPSS 11%

Medium (6.5). EPSS 11% chance of exploitation in the next 30 days.

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2006-12-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
kde:ksirc

References

http://osvdb.org/33443
http://security.gentoo.org/glsa/glsa-200701-26.xml
http://securitytracker.com/id?1017453
http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468
http://www.kde.org/info/security/advisory-20070109-1.txt

Check your stack JSON