USN-4044-1: ZNC vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2019-12816
• https://launchpad.net/ubuntu/+source/znc/1.7.2-2ubuntu0.1
• https://launchpad.net/ubuntu/+source/znc/1.7.1-2ubuntu0.2
• https://launchpad.net/ubuntu/+source/znc/1.6.6-1ubuntu0.2
• https://launchpad.net/ubuntu/+source/znc/1.6.3-1ubuntu0.2
• https://ubuntu.com/security/notices/USN-4044-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2019-12816

Frequently Asked Questions

• What is the severity of USN-4044-1?

  USN-4044-1 is classified as a high severity vulnerability that allows privilege escalation for authenticated non-admin users.

• How do I fix USN-4044-1?

  To fix USN-4044-1, upgrade the znc package to version 1.7.2-2ubuntu0.1 or later for Ubuntu 19.04, 1.7.1-2ubuntu0.2 or later for Ubuntu 18.10, 1.6.6-1ubuntu0.2 or later for Ubuntu 18.04, or 1.6.3-1ubuntu0.2 or later for Ubuntu 16.04.

• Who is affected by USN-4044-1?

  USN-4044-1 affects users of the znc package on specific Ubuntu versions, including 19.04, 18.10, 18.04, and 16.04.

• What type of attack does USN-4044-1 address?

  USN-4044-1 addresses an attack vector that allows authenticated non-admin users to execute arbitrary code through crafted module names.

• Is there a workaround for USN-4044-1?

  There are no known workarounds for USN-4044-1, so upgrading to the patched versions is the recommended solution.