CVE-2019-9917

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html
• lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html
• znc/znc commit 64613bc · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTRBTPL7WWKQ7DZ2ALDTCGYUWSE6SL3
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRHCMHI44AW5CJ22WV676BKFUWWCLA7T
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRVSINQHM623GJYYNDSBYSXT2MHKFCYQ
• seclists.org/bugtraq/2019/Jun/23
• usn.ubuntu.com/3950-1 · Third Party Advisory
• debian.org/security/2019/dsa-4463

znc의 다른 취약점

• CVE-2020-13775보통 6.5ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no…
• CVE-2010-2488높음 7.5NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.
• CVE-2019-12816높음 8.8Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading…
• CVE-2018-14056보통 5.3ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
• CVE-2018-14055보통 6.5ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege…