321 matches found
Code injection
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...
Stack overflow
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
UBUNTU-CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2778
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...
CVE-2015-2779
CVE-2015-2779 affects the Quassel IRC client’s message splitting functionality. A crafted message can trigger unchecked stack growth/recursion, causing remote denial of service due to a stack consumption vulnerability present in versions before the 0.12-rc1 release. Multiple connected advisories ...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
CVE-2015-2778
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...
CVE-2015-2778
CVE-2015-2778 affects Quassel prior to 0.12-rc1, where an incorrect data-type size is used when splitting messages. This allows remote attackers to trigger a denial of service (crash) via a long CTCP query containing only multibyte characters. Public reports in OSV and vendor advisories confirm t...
CVE-2015-2779
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...
openSUSE Security Update : quassel (openSUSE-2015-294)
The IRC client quassel was updated to fix two security issues. The following vulnerabilities were fixed : - quassel could crash when receiving an overlength CTCP query containing only multibyte characters bnc924930 CVE-2015-2778 - quassel could incorrectly split a message in the middle of a...
openSUSE Security Update : quassel (openSUSE-SU-2014:1382-1)
quassel was updated to fix an out-of-bound read CVE-2014-8483. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-638. The text description of this plugin is C SUSE LLC...
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
DEBIAN-CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
Out-of-bounds
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
CVE-2014-8483
CVE-2014-8483 affects Konversation (IRC client for KDE). The issue is a missing size check in Blowfish ECB blocks, leading to an out-of-bounds read that can cause crashes and potentially leak up to 11 bytes. Patches/mitigations: updated Konversation versions (1.5.1) and related KDE Platform requi...
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
CVE-2014-8483
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...
Debian DSA-3063-1 : quassel - security update
An out-of-bounds read vulnerability was discovered in Quassel-core, one of the components of the distributed IRC client Quassel. An attacker can send a crafted message that crash to component causing a denial of services or disclosure of information from process memory. %NASLMINLEVEL 70300 C...
