Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

quassel-irc quassel irc 0.10.0 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2013-4422
SQL injection vulnerability in Quassel IRC prior to 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote malicious users to execute arbitrary SQL commands via a \ (backslash) in a message.
Quassel-irc Quassel Irc 0.6.3Quassel-irc Quassel Irc 0.7.1Quassel-irc Quassel Irc 0.4.1Quassel-irc Quassel Irc 0.4.0Quassel-irc Quassel IrcQuassel-irc Quassel Irc 0.7.0Quassel-irc Quassel Irc 0.6.2Quassel-irc Quassel Irc 0.3.1Quassel-irc Quassel Irc 0.3.0.3Quassel-irc Quassel Irc 0.7.4Quassel-irc Quassel Irc 0.8.0Quassel-irc Quassel Irc 0.6.1Quassel-irc Quassel Irc 0.5.0Quassel-irc Quassel Irc 0.3.0.2Quassel-irc Quassel Irc 0.3.0.1Quassel-irc Quassel Irc 0.7.3Quassel-irc Quassel Irc 0.7.2Quassel-irc Quassel Irc 0.4.3Quassel-irc Quassel Irc 0.4.2Quassel-irc Quassel Irc 0.3.0Quassel-irc Quassel Irc 0.1.0
5
CVSSv2
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote malicious users to cause a denial of service (out-of-bounds read) via a malformed string.
Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Quassel-irc Quassel Irc 0.10.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Opensuse Opensuse 12.3
7.5
CVSSv2
CVE-2015-3427
Quassel prior to 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote malicious users to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete ...
Quassel-irc QuasselDebian Debian Linux 8.0
5
CVSSv2
CVE-2015-8547
The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote malicious users to cause a denial of service (application crash) via the "/op *" command in a query.
Quassel-irc QuasselOpensuse Opensuse 13.2Opensuse Opensuse 13.1Opensuse Leap 42.1
5
CVSSv2
CVE-2018-1000179
A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an malicious user to cause a denial of service.
Quassel-irc Quassel 0.12.4Debian Debian Linux 8.0Debian Debian Linux 9.0
7.5
CVSSv2
CVE-2018-1000178
A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an malicious user to execute code remotely.
Quassel-irc Quassel 0.12.4Debian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook