channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ngircd | Ngircd | 20 (including) | 20 (including) |
| Ngircd | Ngircd | 20.1 (including) | 20.1 (including) |
| Ngircd | Ubuntu | upstream | * |