Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2019-9917

CVE-2019-9917

MEDIUM6.5

ZNC before 1

Published Mar 27, 2019

Modified 1 years ago

Details

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html

WEB

https://github.com/znc/znc/commit/64613bc8b6b4adf1e32231f9844d99cd512b8973

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTRBTPL7WWKQ7DZ2ALDTCGYUWSE6SL3/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRHCMHI44AW5CJ22WV676BKFUWWCLA7T/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRVSINQHM623GJYYNDSBYSXT2MHKFCYQ/

WEB

https://seclists.org/bugtraq/2019/Jun/23

ADVISORY

https://usn.ubuntu.com/3950-1/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-9917

ADVISORY

https://www.debian.org/security/2019/dsa-4463

CVSS Analysis

CVSS v3.0

6.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMar 27, 2019

ModifiedAug 4, 2024

CVE-2019-9917 | Mondoo Vulnerability Intelligence