CVE-2019-12816: Input Validation
Published Jun 15, 2019
·Updated
Last updated 25 August 2025
Other sources
Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.
— Launchpad
Affected Software
2 affected componentsFixes available
ZNC ZNC<=1.7.3
debian/znc
1.8.2-2+deb11u11.8.2-3.1+deb12u11.9.1-21.10.1-1
Remediation
Patch Available
Event History
Jun 15, 2019
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
Description
Data Sourced
via NVD·04:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·10:48 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:48 PM
Description
Data Sourced
via Debian·10:48 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2019-12816?
CVE-2019-12816 is a vulnerability in ZNC before 1.7.4-rc1 that allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.
2
How does CVE-2019-12816 impact ZNC?
CVE-2019-12816 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code on ZNC servers.
3
What is the severity of CVE-2019-12816?
The severity of CVE-2019-12816 is high with a CVSS score of 8.8.
4
Which versions of ZNC are affected by CVE-2019-12816?
ZNC versions before 1.7.4-rc1 are affected by CVE-2019-12816.
5
How can I fix CVE-2019-12816 on my ZNC server?
To fix CVE-2019-12816, you need to update your ZNC installation to version 1.7.4-rc1 or later.