{"id":"CVE-2026-121603","published":"2026-11-03T17:18:11.567","lastModified":"2026-11-03T18:17:58.120","description":"Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte buffer, crashing the ircd or potentially achieving remote code execution.","cvssScore":6.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://github.com/solanum-ircd/solanum","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/blob/7bc7e34c04711247b932666e19ae900cba884540/modules/core/m_kill.c#L277","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/commit/2ea1382e4262b212a91034258c466f0f6754cd61","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/pull/550","tags":[]},{"url":"https://www.vulncheck.com/advisories/solanum-before-commit-2ea1382-buffer-overflow-via-server-to-server-kill-handler","tags":[]}],"exploitRefs":[{"url":"https://github.com/solanum-ircd/solanum","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/blob/7bc7e34c04711247b932666e19ae900cba884540/modules/core/m_kill.c#L277","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/commit/2ea1382e4262b212a91034258c466f0f6754cd61","tags":[]},{"url":"https://github.com/solanum-ircd/solanum/pull/550","tags":[]}],"hasPoc":true,"ai":null}