What’s Vulnerable › Vulnerabilities

CVE-2020-13775

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-02 · updated 2026-06-17
• Weakness: CWE-476

Description

ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.

Affected products

• Fedoraproject Fedora: 31, 32
• znc: 1.8.0

References

• https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8
• https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNVBE4T2DRJRQHFRMHYBTN4OSOL6DBHR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HS3DWGXLVRROQQA57UIPMDM6XMVEMBRA/
• https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8
• https://github.com/znc/znc/commit/d229761821da38d984a9e4098ad96842490dc001
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNVBE4T2DRJRQHFRMHYBTN4OSOL6DBHR/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HS3DWGXLVRROQQA57UIPMDM6XMVEMBRA/

Get alerted when CVE-2020-13775 or the next vulnerability affects your stack