PT-2020-13674 · Znc · Znc

🗓️ 02 Jun 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

This issue allows authenticated users to crash ZNC via a null pointer dereference in versions 1.8.0 to 1.8.1-rc1 when echo-message is off and there is no network.

Reporter	Title	Published	Views	Family All 27
FreeBSD	znc -- Authenticated users can trigger an application crash	2 Jun 202000:00	–	freebsd
AlpineLinux	CVE-2020-13775	2 Jun 202022:51	–	alpinelinux
CNVD	ZNC Code Issue Vulnerability	3 Jun 202000:00	–	cnvd
CVE	CVE-2020-13775	2 Jun 202022:51	–	cve
Cvelist	CVE-2020-13775	2 Jun 202022:51	–	cvelist
Debian CVE	CVE-2020-13775	2 Jun 202022:51	–	debiancve
EUVD	EUVD-2020-5992	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 32 Update: znc-1.8.1-1.fc32	1 Jul 202001:51	–	fedora
Fedora	[SECURITY] Fedora 31 Update: znc-1.8.1-1.fc31	1 Jul 202001:37	–	fedora
Tenable Nessus	Fedora 32 : znc (2020-0091083d6d)	1 Jul 202000:00	–	nessus

Source	Link
github	www.github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8
github	www.github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001
osv	www.osv.dev/vulnerability/CVE-2020-13775
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2020-13775
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HS3DWGXLVRROQQA57UIPMDM6XMVEMBRA
cve	www.cve.org/CVERecord
advisories	www.advisories.mageia.org/MGASA-2020-0316.html
osv	www.osv.dev/vulnerability/MGASA-2020-0316
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNVBE4T2DRJRQHFRMHYBTN4OSOL6DBHR
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-13775

27 Jan 2023 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5

CVSS 23.5

EPSS0.01008