adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-11-03 10:52:22 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

Security Vulnerability - Action Required: NULL Pointer Dereference may in your project #1051

New Issue
Closed
opened 2026-10-05 05:00:33 +02:00 by adam · 3 comments
adam commented 2026-10-05 05:00:33 +02:00
Owner
Copy link
Copy source

Hi,
we have detected that your project may be vulnerable to NULL Pointer Dereference in the function of OnNoticeMessage in the file of src/Client.cpp . It shares similarities to a recent CVE disclosure CVE-2020-13775 in the znc.

The source vulnerability information is as follows:

Vulnerability Detail:
CVE Identifier: CVE-2020-13775
Description: ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13775
Patch: https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001

Would you help to check if this bug is true? If it's true, I'd like to open a PR for that if necessary. Thank you for your effort and patience!

Hi, we have detected that your project may be vulnerable to NULL Pointer Dereference in the function of `OnNoticeMessage` in the file of `src/Client.cpp` . It shares similarities to a recent CVE disclosure [CVE-2020-13775](https://nvd.nist.gov/vuln/detail/CVE-2020-13775) in the [znc](https://github.com/znc/znc). **The source vulnerability information is as follows:** > Vulnerability Detail: > CVE Identifier: CVE-2020-13775 > Description: ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network. > Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-13775 > Patch: https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001 Would you help to check if this bug is true? If it's true, I'd like to open a PR for that if necessary. Thank you for your effort and patience! <!-- github-sync-id:2678210659 -->
adam closed this issue 2026-10-05 05:00:33 +02:00
adam commented 2026-10-05 05:00:34 +02:00
Author
Owner
Copy link
Copy source

Hi
Can you send the details to my email alexey аt asokolov org? you can gpg encrypt it if you want

P.S. we really need some documented way to report such issues >_< (#1914)

Hi Can you send the details to my email alexey аt asokolov org? you can gpg encrypt it if you want P.S. we really need some documented way to report such issues >_< (#1914) <!-- github-comment-id:2492724372 -->
adam commented 2026-10-05 05:00:35 +02:00
Author
Owner
Copy link
Copy source

Hi
Sure, I've already sent an email to you, thank you for your reply

Hi Sure, I've already sent an email to you, thank you for your reply <!-- github-comment-id:2492739347 -->
adam commented 2026-10-05 05:00:36 +02:00
Author
Owner
Copy link
Copy source

Would you help to check if this bug is true?

It's not but thanks

> Would you help to check if this bug is true? It's not but thanks <!-- github-comment-id:2564670327 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#1051