[SECURITY] [DLA 1830-1] znc security update

2019-06-2020:27:47

lists.debian.org

144

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

Package : znc
Version : 1.4-2+deb8u2
CVE ID : CVE-2019-12816

A vulnerability was discovered in the ZNC IRC bouncer which could result
in remote code execution.

For Debian 8 "Jessie", this problem has been fixed in version
1.4-2+deb8u2.

We recommend that you upgrade your znc packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9arm64znc-perl< 1.6.5-1+deb9u2znc-perl_1.6.5-1+deb9u2_arm64.deb
Debian9mipselznc< 1.6.5-1+deb9u2znc_1.6.5-1+deb9u2_mipsel.deb
Debian9s390xznc-tcl< 1.6.5-1+deb9u2znc-tcl_1.6.5-1+deb9u2_s390x.deb
Debian9ppc64elznc-perl< 1.6.5-1+deb9u2znc-perl_1.6.5-1+deb9u2_ppc64el.deb
Debian8armhfznc-dbg< 1.4-2+deb8u2znc-dbg_1.4-2+deb8u2_armhf.deb
Debian9ppc64elznc-tcl< 1.6.5-1+deb9u2znc-tcl_1.6.5-1+deb9u2_ppc64el.deb
Debian9amd64znc-tcl< 1.6.5-1+deb9u2znc-tcl_1.6.5-1+deb9u2_amd64.deb
Debian8amd64znc< 1.4-2+deb8u2znc_1.4-2+deb8u2_amd64.deb
Debian9ppc64elznc-python< 1.6.5-1+deb9u2znc-python_1.6.5-1+deb9u2_ppc64el.deb
Debian8armelznc-python< 1.4-2+deb8u2znc-python_1.4-2+deb8u2_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	arm64	znc-perl	< 1.6.5-1+deb9u2	znc-perl_1.6.5-1+deb9u2_arm64.deb
Debian	9	mipsel	znc	< 1.6.5-1+deb9u2	znc_1.6.5-1+deb9u2_mipsel.deb
Debian	9	s390x	znc-tcl	< 1.6.5-1+deb9u2	znc-tcl_1.6.5-1+deb9u2_s390x.deb
Debian	9	ppc64el	znc-perl	< 1.6.5-1+deb9u2	znc-perl_1.6.5-1+deb9u2_ppc64el.deb
Debian	8	armhf	znc-dbg	< 1.4-2+deb8u2	znc-dbg_1.4-2+deb8u2_armhf.deb
Debian	9	ppc64el	znc-tcl	< 1.6.5-1+deb9u2	znc-tcl_1.6.5-1+deb9u2_ppc64el.deb
Debian	9	amd64	znc-tcl	< 1.6.5-1+deb9u2	znc-tcl_1.6.5-1+deb9u2_amd64.deb
Debian	8	amd64	znc	< 1.4-2+deb8u2	znc_1.4-2+deb8u2_amd64.deb
Debian	9	ppc64el	znc-python	< 1.6.5-1+deb9u2	znc-python_1.6.5-1+deb9u2_ppc64el.deb
Debian	8	armel	znc-python	< 1.4-2+deb8u2	znc-python_1.4-2+deb8u2_armel.deb