Medium severity6.5OSV Advisory· Published Mar 27, 2019· Updated Jun 17, 2026

CVE-2019-9917

Description

ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.

LLM-synthesized narrative grounded in this CVE's description and references.

Znc/ZncOSV3 versions
znc-0.023, znc-0.025, znc-0.027, …+ 2 more
- (no CPE)range: znc-0.023, znc-0.025, znc-0.027, …
- cpe:2.3:a:znc:znc:*:*:*:*:*:*:*:*range: <=1.7.2
- (no CPE)range: <1.7.3-rc1
Canonical/Ubuntu Linux
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
osv-coords7 versions
pkg:rpm/opensuse/znc&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/znc&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/znc&distro=openSUSE%20Tumbleweed pkg:rpm/suse/znc&distro=SUSE%20Package%20Hub%2012 pkg:rpm/suse/znc&distro=SUSE%20Package%20Hub%2012%20SP2 pkg:rpm/suse/znc&distro=SUSE%20Package%20Hub%2015 pkg:rpm/suse/znc&distro=SUSE%20Package%20Hub%2015%20SP1
< 1.7.2-bp150.2.3.1+ 6 more
- (no CPE)range: < 1.7.2-bp150.2.3.1
- (no CPE)range: < 1.7.4-bp150.2.6.1
- (no CPE)range: < 1.8.2-1.11
- (no CPE)range: < 1.7.2-bp150.2.3.1
- (no CPE)range: < 1.7.2-bp150.2.3.1
- (no CPE)range: < 1.7.2-bp150.2.3.1
- (no CPE)range: < 1.7.4-bp151.4.3.1