CVE-2020-29577: Critical severity znc docker image vulnerability
Published Dec 8, 2020
·Updated
The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
Affected Software
11 affected components
ZNC znc docker image=1.6
ZNC znc docker image=1.6-slim
ZNC znc docker image=1.6.4
ZNC znc docker image=1.6.4-slim
ZNC znc docker image=1.6.5
ZNC znc docker image=1.6.5-slim
ZNC znc docker image=1.6.6
ZNC znc docker image=1.6.6-slim
ZNC znc docker image=1.7.0
ZNC znc docker image=1.7.0-slim
ZNC znc docker image=1.7.1-slim
Event History
Dec 8, 2020
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-29577?
CVE-2020-29577 is considered a high-severity vulnerability due to the potential for remote root access.
2
How do I fix CVE-2020-29577?
To fix CVE-2020-29577, upgrade to version 1.7.1-slim or later of the ZNC Docker image.
3
What are the affected versions in CVE-2020-29577?
The affected versions in CVE-2020-29577 are all versions of the ZNC Docker image prior to 1.7.1-slim.
4
What type of attack vectors does CVE-2020-29577 expose?
CVE-2020-29577 exposes systems to remote attacks that can lead to unauthorized root access.
5
Is there a workaround for CVE-2020-29577?
There is no known workaround for CVE-2020-29577; the only solution is to upgrade to the fixed version.