CVE-2021-29376

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-30 · updated 2026-06-17

Description

ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC server) via a crafted CTCP UTC message.

Affected products

Debian Linux: 9.0
Eterna Ircii: before 20210314 — fixed in 20210314

How to fix

Upgrade to a fixed version: Eterna Ircii 20210314. Check the vendor advisory for mitigations.

References

http://www.eterna.com.au/ircii/
http://www.openwall.com/lists/oss-security/2021/03/30/4
https://lists.debian.org/debian-lts-announce/2021/08/msg00022.html
https://lists.debian.org/debian-lts-announce/2021/08/msg00023.html
https://www.openwall.com/lists/oss-security/2021/03/24/2
http://www.eterna.com.au/ircii/
http://www.openwall.com/lists/oss-security/2021/03/30/4
https://lists.debian.org/debian-lts-announce/2021/08/msg00022.html
https://lists.debian.org/debian-lts-announce/2021/08/msg00023.html
https://www.openwall.com/lists/oss-security/2021/03/24/2

Get alerted when CVE-2021-29376 or the next vulnerability affects your stack