{"id":"UBUNTU-CVE-2015-8702","details":"The DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to cause a denial of service (netsplit) via an invalid character in a PTR response, as demonstrated by a \"\\032\" (whitespace) character in a hostname.","modified":"2025-09-08T16:43:30Z","published":"2016-04-12T14:59:00Z","upstream":["CVE-2015-8702"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-8702"},{"type":"REPORT","url":"https://github.com/inspircd/inspircd/commit/6058483d9fbc1b904d5ae7cfea47bfcde5c5b559"},{"type":"REPORT","url":"http://www.inspircd.org/2015/04/16/v2019-released.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2015-8702"}],"affected":[{"package":{"name":"inspircd","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/inspircd@2.0.5-1+deb7u2build0.14.04.1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5-1+deb7u2build0.14.04.1"}]}],"versions":["2.0.5-1","2.0.5-1+deb7u1build0.14.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"inspircd","binary_version":"2.0.5-1+deb7u2build0.14.04.1"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-8702.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}