Quassel 安全漏洞

Quassel Quassel IRC is a graphical, distributed, cross-platform IRC client. A security vulnerability exists in Quassel 0.13.1, which stems from launching without SSL or TLS support when --require-ssl is enabled, if an available X.509 certificate cannot be found on the local system...

Denial Of Service (DoS)

quassel is vulnerable to denial of service. A NULL pointer dereference in the onReadyRead function in core/coreauthhandler.cpp allows remote attackers to crash the application via malicious handshake data...

Ubuntu: Security Advisory (USN-4594-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4594-1: Quassel vulnerabilities

It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2018-1000178 It was discovered that Quassel incorrectly handled certain login requests. A remote attacker could possibly use this issue to cause ...

Ubuntu 18.04 LTS : Quassel vulnerabilities (USN-4594-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4594-1 advisory. It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly use this issue to execute arbitrary code...

Arbitrary Code Execution

quassel is vulnerable to arbitrary code execution. The vulnerability exists through a heap corruption in void DataStreamPeer::processMessageconst QByteArray of datastreampeer.cpp...

Denial Of Service (DoS)

quassel is vulnerable to denial of service DoS. The vulnerability exists through a NULL Pointer Dereference in the quasselcore void CoreAuthHandler::handleconst Login of coreauthhandler.cpp...

GLSA-201806-04 : Quassel: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-04 Quassel: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Quassel. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause arbitrary code execution ...

Quassel: Multiple vulnerabilities

Background Quassel is a Qt4/KDE4 IRC client suppporting a remote daemon for 24/7 connectivity. Description Multiple vulnerabilities have been discovered in Quassel. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause arbitrary code execution or a...

Updated quassel packages fix security vulnerabilities

A heap corruption exists in quassel version 0.12.4 in quasselcore that allows an attacker to execute code remotely CVE-2018-1000178. A NULL Pointer Dereference exists in quassel version 0.12.4 in the quasselcore that allows an atacker to denial of service by attempting a login when the database i...

MGASA-2018-0243 Updated quassel packages fix security vulnerabilities

A heap corruption exists in quassel version 0.12.4 in quasselcore that allows an attacker to execute code remotely CVE-2018-1000178. A NULL Pointer Dereference exists in quassel version 0.12.4 in the quasselcore that allows an atacker to denial of service by attempting a login when the database i...

Fedora Update for quassel FEDORA-2018-9617cb1088

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for quassel FEDORA-2018-5e8de70380

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for quassel FEDORA-2018-bd73ec6f3a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: quassel-0.12.5-1.fc27

Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...

[SECURITY] Fedora 28 Update: quassel-0.12.5-1.fc28

Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...

[SECURITY] Fedora 26 Update: quassel-0.12.5-1.fc26

Quassel IRC is a modern, distributed IRC client, meaning that one or multiple clients can attach to and detach from a central core -- much like the popular combination of screen and a text-based IRC client such as WeeChat, but graphical...

Fedora 27 : quassel (2018-bd73ec6f3a)

Updated to latest upstream release 1571443, 1573318, 1573319. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 26 : quassel (2018-5e8de70380)

Updated to latest upstream release 1571443, 1573318, 1573319. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2018-1000179

A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handleconst Login &msg coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service...