ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.
[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2020-13775-10921ecc",
"source": "https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8",
"digest": {
"length": 339.0,
"function_hash": "243364098206442821278095029834259692094"
},
"signature_version": "v1",
"target": {
"function": "CClient::EchoMessage",
"file": "src/Client.cpp"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2020-13775-68c39034",
"source": "https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001",
"digest": {
"length": 1048.0,
"function_hash": "167904269692328655823236297049711722010"
},
"signature_version": "v1",
"target": {
"function": "CClient::OnTextMessage",
"file": "src/Client.cpp"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2020-13775-7dfec18f",
"source": "https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8",
"digest": {
"line_hashes": [
"179062844239354665685476243343750154315",
"264265845246454891735083395156216957566",
"54659103330784992543614464434984230316",
"329985208195638561965320143980013908939"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "src/Client.cpp"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2020-13775-a1555ee4",
"source": "https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8",
"digest": {
"line_hashes": [
"313626103625464972320511826089238497518",
"254488474879504029450316256937399732264",
"127655687726396844262208649325701215349",
"311663962199179814201078550800328455880"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "test/integration/tests/core.cpp"
}
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2020-13775-a52e7fdf",
"source": "https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8",
"digest": {
"length": 337.0,
"function_hash": "312515070694463833106112290914265113516"
},
"signature_version": "v1",
"target": {
"function": "TEST_F",
"file": "test/integration/tests/core.cpp"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2020-13775-b48ef002",
"source": "https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001",
"digest": {
"line_hashes": [
"66497401595510528959044953371277996417",
"326262900322500493459847737519654946263",
"3090105072537556030670263174490445171",
"100969480569315892382633661881648812705"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "src/Client.cpp"
}
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2020-13775-fc722159",
"source": "https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001",
"digest": {
"line_hashes": [
"282026506429154266749841997301203415096",
"207338783748791260475251416198922182762",
"339186054012205851326171200838075521853",
"164159603877650132016191588735563078924",
"154310451569641065774775021930081256914",
"158207147809730001147209574032629522899",
"207377680942250475708722903493820045482",
"233062993365664671105950193386685885808"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "test/integration/tests/core.cpp"
}
}
]