CVE-2019-9917: Input Validation
Last updated 26 August 2025
Other sources
ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/zncto a version that resolves this vulnerability.Fixed in 1.8.2-2+deb11u1Fixed in 1.8.2-3.1+deb12u1Fixed in 1.9.1-2Fixed in 1.10.1-1 - Upgrade
Upgrade
alpine/zncto a version that resolves this vulnerability.Fixed in 1.7.3-r0 - Upgrade
Upgrade
alpine/zncto a version that resolves this vulnerability.Fixed in 1.7.1-r1 - Upgrade
Upgrade
alpine/zncto a version that resolves this vulnerability.Fixed in 1.7.1-r3 - Upgrade
Upgrade
ZNCto a version that resolves this vulnerability.Fixed in 1.7.3-rc1
Event History
Frequently Asked Questions
What is CVE-2019-9917?
CVE-2019-9917 is a vulnerability in ZNC before 1.7.3-rc1 that allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.
How can the CVE-2019-9917 vulnerability be exploited?
The CVE-2019-9917 vulnerability can be exploited by a remote user sending invalid encoding, causing the system to crash.
What is the severity of CVE-2019-9917?
The severity of CVE-2019-9917 is rated as high with a CVSS score of 6.5.
Which software versions are affected by CVE-2019-9917?
ZNC versions before 1.7.3-rc1 are affected by CVE-2019-9917.
How can I fix the CVE-2019-9917 vulnerability?
To fix the CVE-2019-9917 vulnerability, update ZNC to version 1.7.3-rc1 or later.