The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but without the leading # character, related to a "use-after-delete" error.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-dbg" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-dbgsym" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-dev" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-dev-dbgsym" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-perl" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-perl-dbgsym" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-python" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-python-dbgsym" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-tcl" }, { "binary_version": "1.2-3ubuntu0.1", "binary_name": "znc-tcl-dbgsym" } ] }