Lucene search
Gentoo FoundationGLSA-201412-31HistoryDec 19, 2014 - 12:00 a.m.
ZNC: Denial of service
2014-12-1900:00:00
Gentoo Foundation
security.gentoo.org
8
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.013 Low
EPSS
Percentile
85.6%
Background
ZNC is an advanced IRC bouncer.
Description
Multiple NULL pointer dereferences have been found in ZNC.
Impact
A remote attacker could send a specially crafted request, possibly resulting in a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All ZNC users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-irc/znc-1.2-r1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-irc/znc | < 1.2-r1 | UNKNOWN |
Related
securityvulns
securityvulns
[ MDVSA-2015:013 ] znc
2015-01-13 00:00:00
Multiple znc security vulnerabilities
2015-01-13 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-31
2015-09-29 00:00:00
ZNC < 1.4 DoS Vulnerability
2015-08-29 00:00:00
Fedora Update for znc FEDORA-2013-14132
2013-08-20 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : znc (MDVSA-2015:013)
2015-01-09 00:00:00
GLSA-201412-31 : ZNC: Denial of Service
2014-12-19 00:00:00
openSUSE Security Update : znc (openSUSE-2015-845)
2015-12-02 00:00:00
ubuntucve
ubuntucve
CVE-2014-9403
2014-12-19 00:00:00
CVE-2013-2130
2014-06-05 00:00:00
debiancve
debiancve
CVE-2014-9403
2014-12-19 15:59:00
CVE-2013-2130
2014-06-05 20:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: znc-1.2-0.1.alpha1.fc19
2013-08-16 22:57:57
[SECURITY] Fedora 18 Update: znc-1.2-0.1.alpha1.fc18
2013-08-16 23:04:55
prion
prion
Null pointer dereference
2014-12-19 15:59:00
Null pointer dereference
2014-06-05 20:55:00
cve
cve
CVE-2014-9403
2014-12-19 15:59:00
CVE-2013-2130
2014-06-05 20:55:00
mageia
mageia
Updated znc package fixes CVE-2014-9403
2014-12-21 23:47:32
Updated znc package fixes CVE-2013-2130
2013-08-22 22:16:27
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.013 Low
EPSS
Percentile
85.6%
Related for GLSA-201412-31