CVE-2013-2130: ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) v...

Security readout for executives and security teams

CVE-2013-2130 is a denial-of-service flaw in ZNC 1.0. A logged-in remote user can send crafted webadmin requests that may crash the service. This affects availability, not confidentiality or integrity based on the provided sources. Exposure is most likely on servers running ZNC 1.0 with the webadmin module enabled, especially where non-administrator or broadly trusted users can authenticate remotely. The source bundle does not identify broader affected versions. Prioritize remediation for shared or internet-reachable ZNC services where authenticated users are not tightly controlled. For isolated single-user deployments, handle through normal patch management unless availability is business-critical. Mitigation focus: Upgrade using vendor packages from the cited distribution advisories or an upstream fixed release.; Review vendor guidance for exact fixed versions and package names in your distribution.; Restrict webadmin access to trusted networks and administrators if patching is delayed..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.