CVE-2014-9403

no score yetEPSS 2.2%

znc znc: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC before 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but without the leading # character, related to a "use-after-delete" error.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2014-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

znc:znc

References

http://advisories.mageia.org/MGASA-2014-0543.html
http://secunia.com/advisories/57795
http://www.mandriva.com/security/advisories?name=MDVSA-2015:013
http://www.openwall.com/lists/oss-security/2014/12/18/2
http://www.securityfocus.com/bid/66926

Check your stack JSON