ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Znc | Znc | 1.8.0 (including) | 1.8.0 (including) |
| Znc | Ubuntu | bionic | * |
| Znc | Ubuntu | eoan | * |
| Znc | Ubuntu | trusty | * |
| Znc | Ubuntu | trusty/esm | * |
| Znc | Ubuntu | xenial | * |