Ubuntu: 4044-1 Critical ZNC Privilege Escalation Vulnerability Alert

ubuntu

July 2, 2019

znc could be made to crash or run programs as an administrator if it opened a specially crafted file.

Summary

znc could be made to crash or run programs as an administrator

if it opened a specially crafted file.

Software Description:

- znc: advanced modular IRC bouncer

Details:

Fix vulnerability where an authenticated non-admin users could load

a module with a crafted name, then escalate privileges and run

arbitrary code.

Topics Covered

security advisory privilege escalation Ubuntu crash znc

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  znc                             1.7.2-2ubuntu0.1

Ubuntu 18.10:
  znc                             1.7.1-2ubuntu0.2

Ubuntu 18.04 LTS:
  znc                             1.6.6-1ubuntu0.2

Ubuntu 16.04 LTS:
  znc                             1.6.3-1ubuntu0.2

After a standard system update you need to restart znc to make
all the necessary changes.