CVE-2013-0238
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly...
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
Exploit likelihood
What each source reports
NVD Score used
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
CVE-2013-0238- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
CVE-2013-0238- Updated
- 2026-11-02
EUVDEUVD-2013-0271 No score
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
EUVD-2013-0271- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9gxx-9pxw-xjp7 No score
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly...
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
GHSA-9gxx-9pxw-xjp7- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
CVE-2013-0238- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0238 No score
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allows remote attackers to cause a denial of service (crash) via a mask that causes a negative number to be parsed.
- Record
DEBIAN-CVE-2013-0238- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ircd-hybridDebian:12 |
before 1:7.2.2.dfsg.2-10 | 1:7.2.2.dfsg.2-10 |
ircd-hybridDebian:13 |
before 1:7.2.2.dfsg.2-10 | 1:7.2.2.dfsg.2-10 |
ircd-hybridDebian:6.0 |
before 1:7.2.2.dfsg.2-6.2+squeeze1, plus listed versions 1:7.2.2.dfsg.2-6.2 |
1:7.2.2.dfsg.2-6.2+squeeze1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ircd-hybrid 8.0.5 - Denial of Service | 2013-04-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-0238 is a medium vulnerability (CVSS 5.0) in Ircd-hybrid, published February 7, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.96%, the 95th percentile. Fixed in ircd-hybrid 1:7.2.2.dfsg.2-10.
References
debian.org/security/2013/dsa-2618
secunia.com/advisories/52106
openwall.com/lists/oss-security/2013/01/29/8
mandriva.com/security/advisories?name=MDVSA-2013:093
securityfocus.com/bid/57610
svn.ircd-hybrid.org/viewcvs.cgi/ircd-hybrid/trunk/src/hostmask.c?r1=1786&r2=1785&pathrev=1786
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/81695
wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055
osvdb.org/89623
exploit-db.com/exploits/24951
bugs.debian.org/cgi-bin/bugreport.cgi?bug=699267
nvd.nist.gov/vuln/detail/CVE-2013-0238
github.com/advisories/GHSA-9gxx-9pxw-xjp7
security-tracker.debian.org/tracker/CVE-2013-0238