Strix
26.1K

CVE-2010-2448

UnknownEPSS 2.06%

Last modified

CVE-2010-2448 is a vulnerability of currently unknown severity. znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.. EPSS estimates a 2.06% chance of exploitation in the next 30 days.

Description

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.

Metrics

EPSS Probability
2.06%

78.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
ZncZnc<= 0.090
ZncZnc0.034
ZncZnc0.041
ZncZnc0.043
ZncZnc0.044
ZncZnc0.045
ZncZnc0.047
ZncZnc0.050
ZncZnc0.052
ZncZnc0.054
ZncZnc0.056
ZncZnc0.058
ZncZnc0.060
ZncZnc0.062
ZncZnc0.064
ZncZnc0.066
ZncZnc0.068
ZncZnc0.070
ZncZnc0.072
ZncZnc0.074
ZncZnc0.076
ZncZnc0.078
ZncZnc0.080

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-2448?
znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
How severe is CVE-2010-2448?
Severity scoring for CVE-2010-2448 is pending analysis. The EPSS model estimates a 2.06% probability of exploitation in the next 30 days.
How do I fix CVE-2010-2448?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-2448?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST