CVE-2012-0033

NameCVE-2012-0033
DescriptionThe CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via a crafted DCC RESUME request.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
znc (PTS)bullseye1.8.2-2fixed
bullseye (security)1.8.2-2+deb11u1fixed
bookworm1.8.2-3.1fixed
bookworm (security)1.8.2-3.1+deb12u1fixed
sid, trixie1.9.1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
zncsourcelenny(not affected)
zncsourcesqueeze(not affected)
zncsource(unstable)0.202-2

Notes

[squeeze] - znc <not-affected> (Only affects 0.200 and 0.202)
[lenny] - znc <not-affected> (Only affects 0.200 and 0.202)

Search for package or bug name: Reporting problems