Launchpad.net

CVE 2020-14148

The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.

See the CVE page on Mitre.org for more details.