{"id":"CVE-2015-8702","details":"The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a \"\\032\" (whitespace) character in a hostname.","modified":"2026-04-10T03:45:34.315278Z","published":"2016-04-12T14:59:07Z","references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3527"},{"type":"ADVISORY","url":"http://www.inspircd.org/2015/04/16/v2019-released.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201512-13"},{"type":"EVIDENCE","url":"https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559"},{"type":"EVIDENCE","url":"https://github.com/inspircd/inspircd/issues/1033"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"}]}