CVE-2024-39844

The ZNC IRC bouncer is vulnerable to remote code execution (RCE) in versions prior to 1.9.1 . The root cause is that messages and channel names are not properly escaped in the modtcl module, allowing an attacker to execute arbitrary code via a specially crafted KICK command. Impact includes full ...

CVE-2024-39844

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK...

PT-2024-28697 · Znc +2 · Znc +2

Name of the Vulnerable Software and Affected Versions: ZNC versions prior to 1.9.1 Description: The issue allows for remote code execution in the modtcl module of ZNC, which can be triggered through a prepared kick message. Recommendations: For versions prior to 1.9.1, update to version 1.9.1 or...