CVE-2013-2130
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference...
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
Exploit likelihood
What each source reports
NVD Score used
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
CVE-2013-2130- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
CVE-2013-2130- Updated
- 2026-11-02
EUVDEUVD-2013-2098 No score
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
EUVD-2013-2098- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fx7f-7phm-xwv9 No score
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference...
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
GHSA-fx7f-7phm-xwv9- Updated
- 2026-11-02
OSV No score
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
CVE-2013-2130- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2130 No score
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
- Record
DEBIAN-CVE-2013-2130- Updated
- 2026-11-02
OSVMGASA-2013-0257 No score
Updated znc package fixes CVE-2013-2130
Updated znc packages fix security vulnerability:
Multiple vulnerabilities were reported in ZNC version 1.0 which can be exploited by malicious authenticated users to cause a denial of service. These flaws are due to errors when handling the "editnetwork", "editchan", "addchan", and "delchan" page requests; they can be exploited to cause a NULL pointer dereference (CVE-2013-2130).
- Record
MGASA-2013-0257- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2130 is a medium vulnerability (CVSS 4.0) in Znc, published August 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. Fixed in znc 1.0-5.
References
advisories.mageia.org/MGASA-2013-0257.html
openwall.com/lists/oss-security/2013/05/30/3
secunia.com/advisories/53450
lists.fedoraproject.org/pipermail/package-announce/2013-August/114172.html
mandriva.com/security/advisories?name=MDVSA-2015:013