Wind River Support Network


LIN6-9151 : Security Advisory - znc - CVE-2014-9403

Created: Dec 30, 2014    Updated: Dec 3, 2018
Resolved Date: Feb 28, 2015
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but without the leading # character, related to a use-after-delete error.<a href=>CWE-476: NULL Pointer Dereference</a>

Other Downloads

Live chat