Summary
Fix vulnerability where an authenticated non-admin users could load
a module with a crafted name, then escalate privileges and run
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | znc | 1.6.3-1ubuntu0.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | znc | 1.6.6-1ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbi…
References
-
report
https://ubuntu.com/security/CVE-2019-12816