QU
Product
Quassel
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch
Add Quassel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000178 | 9.8 | May 8 | A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that… Affected: 0.12.4 |
| CVE-2021-34825 | 7.5 | Jun 17 | Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system Affected: through 0.13.1 |
| CVE-2018-1000179 | 7.5 | May 8 | A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows… Affected: 0.12.4 |
| CVE-2016-4414 | 7.5 | Jun 13 | The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid… Affected: through 0.12.3 |
| CVE-2015-8547 | 7.5 | Jan 8 | The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op… Affected: through 0.10.0 |
| CVE-2015-3427 | – | May 14 | Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection… Affected: through 0.12.1 |
| CVE-2015-2779 | – | Apr 10 | Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via… Affected: through 0.11.0 |
| CVE-2015-2778 | – | Apr 10 | Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash) via a long CTCP query… Affected: through 0.11.0 |
| CVE-2011-3354 | – | Oct 4 | The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client… Affected: through 0.7.2; 0.3.0; 0.3.1; 0.4.0; 0.4.1; 0.4.2; +8 more |
Showing 9