CVE-2019-12816

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html
• lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html
• znc/znc commit 8de9e37 · Patch
• znc/znc · Patch
• lists.debian.org/debian-lts-announce/2019/06/msg00017.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4O24TQOB73X57GACLZVMRVUK4UKHLE5G
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHR6OD52FQAG5ZPZ42NJM2T765C3V2XC
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEESIGRNFLZUWXZPDGXAZ7JZTHYBDJ7G
• seclists.org/bugtraq/2019/Jun/23 · Third Party Advisory
• security.gentoo.org/glsa/201908-15
• usn.ubuntu.com/4044-1

Lỗ hổng khác của znc

• CVE-2020-13775TRUNG BÌNH 6.5ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is no…
• CVE-2010-2488CAO 7.5NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections.
• CVE-2019-9917TRUNG BÌNH 6.5ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.
• CVE-2018-14056TRUNG BÌNH 5.3ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
• CVE-2018-14055TRUNG BÌNH 6.5ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege…