398 matches found
Fedora: Security Advisory (FEDORA-2024-3bede83c58)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-29577
The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...
CVE-2020-13775
ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash with a NULL pointer dereference if echo-message is not enabled and there is no network...
CVE-2010-2488
NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...
openSUSE Security Advisory (openSUSE-SU-2024:0203-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : znc / znc-clientbuffer / znc-push (2024-1c078a4771)
The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-1c078a4771 advisory. Fix CVE-2024-39844 https://wiki.znc.in/ChangeLog/1.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
[SECURITY] Fedora 41 Update: znc-push-2.0.0-10.20210311git4243934.fc41
ZNC Push is a module for ZNC that will send notifications to multiple push notification services, or SMS for any private message or channel highlight that matches a configurable set of conditions...
GLSA-202409-23 : ZNC: Remote Code Execution
The remote host is affected by the vulnerability described in GLSA-202409-23 ZNC: Remote Code Execution ZNC's modtcl could allow for remote code execution via a KICK. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not...
ZNC: Remote Code Execution
Background ZNC is an advanced IRC bouncer. Description ZNC's modtcl could allow for remote code execution via a KICK. Impact A vulnerable ZNC with the modtcl module loaded could be exploited for remote code execution. Workaround Unload the modtcl module. Resolution All ZNC users should upgrade to...
Ubuntu: Security Advisory (USN-6990-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : znc vulnerability (USN-6990-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6990-1 advisory. Johannes Kuhn DasBrain discovered that znc incorrectly handled user input under certain operations. An...
USN-6990-1: znc vulnerability
Johannes Kuhn DasBrain discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary code on a user's system if the user was tricked into joining a malicious server...
Security update for znc (critical)
openSUSE Security Update: Security update for znc Announcement ID: openSUSE-SU-2024:0203-1 Rating: critical References: 1227393 Cross-References: CVE-2024-39844 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update for z...
FreeBSD : znc -- remote code execution vulnerability (8057d198-4d26-11ef-8e64-641c67a117d8)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8057d198-4d26-11ef-8e64-641c67a117d8 advisory. Mitre reports: In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK. Tenable has...
OPENSUSE-SU-2024:0203-1 Security update for znc
This update for znc fixes the following issues: Update to 1.9.1 boo1227393, CVE-2024-39844 This is a security release to fix CVE-2024-39844: remote code execution vulnerability in modtcl. To mitigate this for existing installations, simply unload the modtcl module for every user, if it's loaded...
ZNC < 1.9.1 RCE Vulnerability
ZNC is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:znc:znc"; ifdescriptio...
OPENSUSE-SU-2024:14115-1 znc-1.9.1-1.1 on GA media
These are all security issues fixed in the znc-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
Mageia: Security Advisory (MGASA-2024-0257)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
