Wind River Support Network

HomeDefectsLIN5-19955
Fixed

LIN5-19955 : Security Advisory - znc - CVE-2014-9403

Created: Dec 30, 2014    Updated: Dec 19, 2017
Resolved Date: Feb 28, 2015
Found In Version: 5.0.1.22
Fix Version: 5.0.1.24
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but without the leading # character, related to a use-after-delete error.<a href=http://cwe.mitre.org/data/definitions/476.html>CWE-476: NULL Pointer Dereference</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9403

Other Downloads


Live chat
Online