CVE-2026-121603
Received Received - Intake

Buffer Overflow in Solanum IRC Daemon

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: VulnCheck

Description
Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte buffer, crashing the ircd or potentially achieving remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-121603
EUVD
EUVD-2026-116038

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
solanum-ircd solanum 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in Solanum IRCd before commit 2ea1382. It occurs in the ms_kill() function where a malicious linked server can send an excessively long kill reason. The reason exceeds the KILLLEN limit and overflows a static 512-byte buffer, potentially crashing the IRC server or allowing remote code execution.

Impact Analysis

If you run a Solanum IRCd server, attackers controlling a compromised peer server could exploit this to crash your server or execute arbitrary code. This could disrupt IRC services, lead to data loss, or allow unauthorized access to your system.

Mitigation Strategies

Update Solanum to the latest commit (2ea1382 or later) to patch the buffer overflow in ms_kill(). Disable or remove any untrusted linked servers until patched. Monitor IRC server logs for unusually long kill reasons or crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121603. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...