oss-sec mailing list archives

CVE Request: ZNC NULL Pointer Dereference


From: Sean Amoss <ackle () gentoo org>
Date: Sat, 13 Dec 2014 10:59:21 -0500

Hello,

It looks like the following issue has not received a CVE identifier as
of yet:

A NULL pointer dereference has been found in the
"CWebAdminMod::ChanPage()" function in modules/webadmin.cpp.

This was reported to Gentoo [1] by means of a Secunia advisory [2],
which in turn referenced the upstream bug request [3].


[1] https://bugs.gentoo.org/show_bug.cgi?id=507794
[2] https://secunia.com/advisories/57795/
[3] https://github.com/znc/znc/issues/528


Thanks,
Sean
-- 
Sean Amoss
Gentoo Security | GLSA Coordinator
E-Mail : ackle () gentoo org
GnuPG FP : E58A AABD DD2D 03AF 0A7A 2F14 1877 72EC E928 357A

Attachment: signature.asc
Description: OpenPGP digital signature


Current thread: