USN-6990-1: znc vulnerability
Published Sep 4, 2024
·Updated
Johannes Kuhn (DasBrain) discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary code on a user's system if the user was tricked into joining a malicious server.
Affected Software
60 affected componentsFixes available
All of the following
ubuntu/znc<1.9.0-2ubuntu0.1~esm2
1.9.0-2ubuntu0.1~esm2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/znc-dev<1.9.0-2ubuntu0.1~esm2
1.9.0-2ubuntu0.1~esm2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/znc-perl<1.9.0-2ubuntu0.1~esm2
1.9.0-2ubuntu0.1~esm2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/znc-python<1.9.0-2ubuntu0.1~esm2
1.9.0-2ubuntu0.1~esm2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/znc-tcl<1.9.0-2ubuntu0.1~esm2
1.9.0-2ubuntu0.1~esm2
Ubuntu Ubuntu=24.04
All of the following
ubuntu/znc<1.8.2-2ubuntu0.1
1.8.2-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/znc-dev<1.8.2-2ubuntu0.1
1.8.2-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/znc-perl<1.8.2-2ubuntu0.1
1.8.2-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/znc-python<1.8.2-2ubuntu0.1
1.8.2-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/znc-tcl<1.8.2-2ubuntu0.1
1.8.2-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/znc<1.7.5-4ubuntu0.1~esm2
1.7.5-4ubuntu0.1~esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/znc-dev<1.7.5-4ubuntu0.1~esm2
1.7.5-4ubuntu0.1~esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/znc-perl<1.7.5-4ubuntu0.1~esm2
1.7.5-4ubuntu0.1~esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/znc-python<1.7.5-4ubuntu0.1~esm2
1.7.5-4ubuntu0.1~esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/znc-tcl<1.7.5-4ubuntu0.1~esm2
1.7.5-4ubuntu0.1~esm2
Ubuntu Ubuntu=20.04
All of the following
ubuntu/znc<1.6.6-1ubuntu0.2+esm2
1.6.6-1ubuntu0.2+esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/znc-dev<1.6.6-1ubuntu0.2+esm2
1.6.6-1ubuntu0.2+esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/znc-perl<1.6.6-1ubuntu0.2+esm2
1.6.6-1ubuntu0.2+esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/znc-python<1.6.6-1ubuntu0.2+esm2
1.6.6-1ubuntu0.2+esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/znc-tcl<1.6.6-1ubuntu0.2+esm2
1.6.6-1ubuntu0.2+esm2
Ubuntu Ubuntu=18.04
All of the following
ubuntu/znc<1.6.3-1ubuntu0.2+esm2
1.6.3-1ubuntu0.2+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/znc-dev<1.6.3-1ubuntu0.2+esm2
1.6.3-1ubuntu0.2+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/znc-perl<1.6.3-1ubuntu0.2+esm2
1.6.3-1ubuntu0.2+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/znc-python<1.6.3-1ubuntu0.2+esm2
1.6.3-1ubuntu0.2+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/znc-tcl<1.6.3-1ubuntu0.2+esm2
1.6.3-1ubuntu0.2+esm2
Ubuntu Ubuntu=16.04
All of the following
ubuntu/znc<1.2-3ubuntu0.1+esm3
1.2-3ubuntu0.1+esm3
Ubuntu Ubuntu=14.04
All of the following
ubuntu/znc-dev<1.2-3ubuntu0.1+esm3
1.2-3ubuntu0.1+esm3
Ubuntu Ubuntu=14.04
All of the following
ubuntu/znc-perl<1.2-3ubuntu0.1+esm3
1.2-3ubuntu0.1+esm3
Ubuntu Ubuntu=14.04
All of the following
ubuntu/znc-python<1.2-3ubuntu0.1+esm3
1.2-3ubuntu0.1+esm3
Ubuntu Ubuntu=14.04
All of the following
ubuntu/znc-tcl<1.2-3ubuntu0.1+esm3
1.2-3ubuntu0.1+esm3
Ubuntu Ubuntu=14.04
Event History
Sep 4, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6990-1?
The severity of USN-6990-1 is high due to the potential for arbitrary code execution.
2
How do I fix USN-6990-1?
To fix USN-6990-1, update znc to version 1.9.0-2ubuntu0.1~esm2 or later if you are on Ubuntu 24.04.
3
Which versions of znc are affected by USN-6990-1?
USN-6990-1 affects znc versions prior to 1.9.0-2ubuntu0.1~esm2 on specific Ubuntu releases.
4
What can an attacker do with the vulnerability in USN-6990-1?
An attacker could execute arbitrary code on a user's system by tricking them into joining a malicious server.
5
Is USN-6990-1 relevant for older Ubuntu versions?
Yes, USN-6990-1 is relevant for multiple older Ubuntu versions as well as the latest release.