CVE-2022-24976 Auth bypass in n/a
Attackers can bypass authentication in Atheme IRC Services by manipulating the IRC handshake during login, requiring specific InspIRCd integration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-24976?
CVE-2022-24976 is a critical authentication bypass vulnerability in n/a, published on 13 Feb 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.
Weakness: CWE-287
Which versions are affected by CVE-2022-24976?
It affects 1 product.
Linux distribution packages (5)
atheme SUSE:Package Hub 15 SP3 | All versions | 7.2.12-bp153.2.3.1 |
atheme SUSE:Package Hub 15 SP4 | All versions | 7.2.12-bp154.2.3.1 |
atheme openSUSE:Leap 15.3 | All versions | 7.2.12-bp153.2.3.1 |
atheme openSUSE:Leap 15.4 | All versions | 7.2.12-bp154.2.3.1 |
atheme openSUSE:Tumbleweed | All versions | 7.2.12-2.1 |
Products include Atheme Atheme.
How do I fix CVE-2022-24976?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-24976 being exploited?
There is no known exploitation of CVE-2022-24976 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2022-24976, GHSA-3fv4-6wvg-x83x, UBUNTU-CVE-2022-24976, openSUSE-SU-2022:10018-1, openSUSE-SU-2022:10019-1, openSUSE-SU-2024:11848-1.