Summary
Johannes Kuhn (DasBrain) discovered that znc incorrectly handled
user input under certain operations. An attacker could possibly
use this issue to execute arbitrary code on a user's system if
the user was tricked into joining a malicious server.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | znc | 1.8.2-2ubuntu0.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | znc | 1.2-3ubuntu0.1+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | znc | 1.6.3-1ubuntu0.2+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | znc | 1.6.6-1ubuntu0.2+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | znc | 1.7.5-4ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | znc | 1.9.0-2ubuntu0.1~esm2 |
Vulnerabilities 1
-
Critical 9.8CVE-2024-39844 Public exploit
In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.
References
-
report
https://ubuntu.com/security/CVE-2024-39844