{"action":"Upgrade ircd-hybrid to 1:7.2.2.dfsg.2-6.1 or later.","affected":[{"fixed":"1:7.2.2.dfsg.2-6.1","introduced":"0"}],"component":"ircd-hybrid","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:7.2.2.dfsg.2-6.1"],"id":"tcs_01M5N9E2H7D8MNEH33B57522VC","modified_at":"2026-10-23T17:47:35.591272710Z","published_at":"2010-02-04T20:15:23.750Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2009-4016","https://security-tracker.debian.org/tracker/CVE-2009-4016"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2009-4016","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2009-4016"}],"summary":"Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allow"}