PT-2019-6548 · Znc · Znc

Suschman · Published 2019-11-12 · Updated 2019-11-14 · CVE-2010-2488

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ZNC versions prior to 0.092

Description A NULL pointer dereference issue occurs due to traffic stats when there are unauthenticated connections.

Recommendations For versions prior to 0.092, update to version 0.092 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2010-2488

DSA-2069-1

Affected Products

Znc

References · 7

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-2488 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2488 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2488 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2010-2488 · Note
• https://wiki.znc.in/ChangeLog/0.092 · Note