Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

quassel-irc quassel irc vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2010-3443
ctcphandler.cpp in Quassel prior to 0.6.3 and 0.7.x prior to 0.7.1 allows remote malicious users to cause a denial of service (unresponsive IRC) via multiple Client-To-Client Protocol (CTCP) requests in a PRIVMSG message.
Quassel-irc Quassel Irc 0.4.1Quassel-irc Quassel Irc 0.3.0.1Quassel-irc Quassel Irc 0.4.3Quassel-irc Quassel Irc 0.3.0.3Quassel-irc Quassel Irc 0.3.0Quassel-irc Quassel Irc 0.1.0Quassel-irc Quassel IrcQuassel-irc Quassel Irc 0.5.0Quassel-irc Quassel Irc 0.6.1Quassel-irc Quassel Irc 0.3.1Quassel-irc Quassel Irc 0.7.0Quassel-irc Quassel Irc 0.4.0Quassel-irc Quassel Irc 0.3.0.2Quassel-irc Quassel Irc 0.4.2Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 9.10
5
CVSSv2
CVE-2011-3354
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel prior to 0.7.3 allows remote malicious users to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.
Quassel-irc Quassel 0.7.0Quassel-irc Quassel 0.3.0Quassel-irc Quassel 0.5.1Quassel-irc Quassel 0.5.2Quassel-irc Quassel 0.4.1Quassel-irc Quassel 0.4.2Quassel-irc Quassel 0.7.1Quassel-irc QuasselQuassel-irc Quassel 0.4.3Quassel-irc Quassel 0.5.0Quassel-irc Quassel 0.3.1Quassel-irc Quassel 0.4.0Quassel-irc Quassel 0.6.0Quassel-irc Quassel 0.6.1
6.8
CVSSv2
CVE-2013-4422
SQL injection vulnerability in Quassel IRC prior to 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote malicious users to execute arbitrary SQL commands via a \ (backslash) in a message.
Quassel-irc Quassel Irc 0.6.3Quassel-irc Quassel Irc 0.7.1Quassel-irc Quassel Irc 0.4.1Quassel-irc Quassel Irc 0.4.0Quassel-irc Quassel IrcQuassel-irc Quassel Irc 0.7.0Quassel-irc Quassel Irc 0.6.2Quassel-irc Quassel Irc 0.3.1Quassel-irc Quassel Irc 0.3.0.3Quassel-irc Quassel Irc 0.7.4Quassel-irc Quassel Irc 0.8.0Quassel-irc Quassel Irc 0.6.1Quassel-irc Quassel Irc 0.5.0Quassel-irc Quassel Irc 0.3.0.2Quassel-irc Quassel Irc 0.3.0.1Quassel-irc Quassel Irc 0.7.3Quassel-irc Quassel Irc 0.7.2Quassel-irc Quassel Irc 0.4.3Quassel-irc Quassel Irc 0.4.2Quassel-irc Quassel Irc 0.3.0Quassel-irc Quassel Irc 0.1.0
4
CVSSv2
CVE-2013-6404
Quassel core (server daemon) in Quassel IRC prior to 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id....
Quassel-irc Quassel IrcQuassel-irc Quassel Irc 0.9.0
5
CVSSv2
CVE-2015-2778
Quassel prior to 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote malicious users to cause a denial of service (crash) via a long CTCP query containing only multibyte characters.
Quassel-irc Quassel
5
CVSSv2
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel prior to 0.12-rc1 allows remote malicious users to cause a denial of service (uncontrolled recursion) via a crafted massage.
Quassel-irc Quassel
7.5
CVSSv2
CVE-2015-3427
Quassel prior to 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote malicious users to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete ...
Quassel-irc QuasselDebian Debian Linux 8.0
4.3
CVSSv2
CVE-2021-34825
Quassel up to and including 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system.
Quassel-irc QuasselFedoraproject Fedora 33Fedoraproject Fedora 34
5
CVSSv2
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote malicious users to cause a denial of service (out-of-bounds read) via a malformed string.
Canonical Ubuntu Linux 12.04Debian Debian Linux 7.0Quassel-irc Quassel Irc 0.10.0Opensuse Opensuse 13.1Opensuse Opensuse 13.2Opensuse Opensuse 12.3
5
CVSSv2
CVE-2018-1000179
A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an malicious user to cause a denial of service.
Quassel-irc Quassel 0.12.4Debian Debian Linux 8.0Debian Debian Linux 9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook