Lucene search

K
freebsdFreeBSD49D9C28C-FBAD-11E4-B0FB-00269EE29E57
HistoryApr 23, 2015 - 12:00 a.m.

Quassel IRC -- SQL injection vulnerability

2015-04-2300:00:00
vuxml.freebsd.org
17

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.1%

Quassel IRC developers report:

Restarting a PostgreSQL database while Quassel Core is running
would not properly re-initialize the database session inside Quassel,
bringing back an old security issue (CVE-2013-4422).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchquassel< 0.11.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.1%