CVE-2024-39844: ZNC modtcl RCE

Q: What is the severity of CVE-2024-39844?

CVE-2024-39844 has been identified as a critical vulnerability allowing for remote code execution in ZNC before version 1.9.1.

Q: How do I fix CVE-2024-39844?

To mitigate CVE-2024-39844, update ZNC to version 1.9.1 or later.

Q: What versions of ZNC are affected by CVE-2024-39844?

CVE-2024-39844 affects ZNC versions prior to 1.9.1, including all versions before that release.

Q: What component of ZNC is vulnerable in CVE-2024-39844?

The vulnerability in CVE-2024-39844 specifically affects the modtcl component of ZNC.

Q: How can remote code execution occur in CVE-2024-39844?

Remote code execution in CVE-2024-39844 can occur via the KICK command in modtcl.

Published Jul 3, 2024

Updated

In ZNC before 1.9.1, remote code execution can occur in modtcl via a KICK.

Affected Software

9 affected componentsFixes available

debian/znc<1.8.2-3.1+deb12u1

1.8.2-3.1+deb12u1

debian/znc<1.9.1-1

1.9.1-1

debian/znc<1.9.1-1

1.9.1-1

debian/znc

1.8.2-3.1+deb12u11.9.1-21.9.1-2+deb13u11.10.3-1

alpine/znc<1.9.1-r0

1.9.1-r0

alpine/znc<1.9.1-r0

1.9.1-r0

alpine/znc<1.9.1-r0

1.9.1-r0

alpine/znc<1.9.1-r0

1.9.1-r0

alpine/znc<1.9.1-r0

1.9.1-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/znc to a version that resolves this vulnerability.
Fixed in 1.8.2-3.1+deb12u1
Upgrade
Upgrade debian/znc to a version that resolves this vulnerability.
Fixed in 1.9.1-1
Upgrade
Upgrade debian/znc to a version that resolves this vulnerability.
Fixed in 1.8.2-3.1+deb12u1Fixed in 1.9.1-2Fixed in 1.9.1-2+deb13u1Fixed in 1.10.3-1
Upgrade
Upgrade alpine/znc to a version that resolves this vulnerability.
Fixed in 1.9.1-r0
Upgrade
Upgrade ZNC to a version that resolves this vulnerability.
Fixed in 1.9.1

Event History

Jul 3, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Data Sourced

via OSV·05:15 PM

DescriptionSeverityAffected Software

Exploit Published

via GitHub·11:27 PM

Parent advisories

This vulnerability appears in the following advisories.

DSA-5725

Frequently Asked Questions

What is the severity of CVE-2024-39844?

CVE-2024-39844 has been identified as a critical vulnerability allowing for remote code execution in ZNC before version 1.9.1.

How do I fix CVE-2024-39844?

To mitigate CVE-2024-39844, update ZNC to version 1.9.1 or later.

What versions of ZNC are affected by CVE-2024-39844?

CVE-2024-39844 affects ZNC versions prior to 1.9.1, including all versions before that release.

What component of ZNC is vulnerable in CVE-2024-39844?

The vulnerability in CVE-2024-39844 specifically affects the modtcl component of ZNC.

How can remote code execution occur in CVE-2024-39844?

Remote code execution in CVE-2024-39844 can occur via the KICK command in modtcl.

CVE-2024-39844: ZNC modtcl RCE

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What is the severity of CVE-2024-39844?

How do I fix CVE-2024-39844?

What versions of ZNC are affected by CVE-2024-39844?

What component of ZNC is vulnerable in CVE-2024-39844?

How can remote code execution occur in CVE-2024-39844?

Company

Resources

Contact