Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade znc | Nov 8, 2019 | Jun 15, 2019 |
| Debian | — | Upgrade znc | Jun 17, 2019 | Jun 15, 2019 |
| Freebsd | — | Upgrade znc | Jun 22, 2019 | Jun 22, 2019 |
| Gentoo Linux | — | Upgrade net-irc/znc. | Aug 16, 2019 | Jun 15, 2019 |
| Suse | — | Upgrade znc-develUpgrade znc-langUpgrade znc-perlUpgrade znc-python3Upgrade znc-tclUpgrade znc | Jul 22, 2019 | Jun 15, 2019 |
| Ubuntu | — | Upgrade znc | Jul 2, 2019 | Jun 15, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub