CVE-2010-2448: znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by reque...

Security readout for executives and security teams

CVE-2010-2448 is a denial-of-service flaw in ZNC before 0.092. An authenticated remote user could crash the service by requesting traffic statistics when another connection is unauthenticated. Business impact is service interruption for users relying on ZNC, not data theft based on the provided sources. Exposure is likely limited to organizations running ZNC versions before 0.092, especially where multiple users can authenticate to ZNC web administration or shell-style management features. The provided CVE data has no CPEs or complete affected package matrix. Treat as a targeted availability risk. Prioritize remediation if ZNC supports operational teams, shared users, or customer-facing workflows. It is less urgent than unauthenticated remote code execution, but outdated internet-connected infrastructure should be removed or upgraded. Mitigation focus: Upgrade ZNC to 0.092 or a vendor-fixed package.; Review Debian and Fedora advisories for backported fixed versions.; Restrict ZNC administration access to trusted users and networks..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.