CVE-2019-12816

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html
• lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html
• znc/znc commit 8de9e37 · Patch
• znc/znc · Patch
• lists.debian.org/debian-lts-announce/2019/06/msg00017.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4O24TQOB73X57GACLZVMRVUK4UKHLE5G
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHR6OD52FQAG5ZPZ42NJM2T765C3V2XC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEESIGRNFLZUWXZPDGXAZ7JZTHYBDJ7G
• seclists.org/bugtraq/2019/Jun/23 · Third Party Advisory
• security.gentoo.org/glsa/201908-15
• usn.ubuntu.com/4044-1

znc のその他の脆弱性

• CVE-2020-13775中 6.5ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no…
• CVE-2010-2488高 7.5NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.
• CVE-2019-9917中 6.5ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.
• CVE-2018-14056中 5.3ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
• CVE-2018-14055中 6.5ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege…