CVE-2019-9917

Name of the Vulnerable Software and Affected Versions ZNC versions prior to 1.7.3-rc1

Description The issue allows an existing remote user to cause a Denial of Service (crash) via invalid encoding. It is due to insufficient input validation in the mechanism for disconnecting clients from the IRC server or a selected channel. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 1.7.3-rc1, update to version 1.7.3-rc1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ZNC service to minimize the risk of exploitation.