UBUNTU-CVE-2015-2778

Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...

CVE-2015-2778

Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...

Epic 1.0.1/1.0.x CTCP Nickname Server Message Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8999/info A remotely exploitable buffer overrun has been reported in Epic. This issue may reportedly be exploited by a malicious server that supplies an overly long nickname in a CTCP messages, potentially allowing for...

X-Chat 1.x CTCP Ping Arbitrary Remote IRC Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and additional IRC...

GLSA-201311-03 : Quassel: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-03 Quassel: Multiple Vulnerabilities Two vulnerabilities have been found in Quassel: Quassel does not properly handle multiple CTCP requests CVE-2010-3443. Quassel, when used with certain versions of Qt and PostgreSQL, does...

Quassel: Multiple Vulnerabilities

Background Quassel is a Qt4/KDE4 IRC client suppporting a remote daemon for 24/7 connectivity. Description Two vulnerabilities have been found in Quassel: Quassel does not properly handle multiple CTCP requests CVE-2010-3443. Quassel, when used with certain versions of Qt and PostgreSQL, does not...

CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

DEBIAN-CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

Design/Logic Flaw

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

CVE-2011-3354

The CVE-2011-3354 vulnerability affects Quassel up to version 0.7.3, where the CtcpParser::packedReply function in core/ctcpparser.cpp can be triggered by a crafted CTCP request to cause a remote denial of service (crash). Exploitation was demonstrated in the wild in September 2011. Mitigation: u...

Fedora 16 : quassel-0.7.3-1.fc16 (2011-12569)

Fixes CVE-2011-3354, invalid CTCP handling causes DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 15 : quassel-0.7.3-1.fc15 (2011-12614)

Fixes CVE-2011-3354, invalid CTCP handling causes DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Quassel IRC client DoS

CTCP request parsing DoS...

Ubuntu Update for quassel USN-1200-1

Ubuntu Update for Linux kernel vulnerabilities USN-1200-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12001.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for quassel USN-1200-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1200-1: Quassel vulnerability

It was discovered that Quassel did not properly handle CTCP requests. A remote attacker could exploit this to cause a denial of service via application crash...

CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

Ubuntu Update for quassel vulnerability USN-991-1

Ubuntu Update for Linux kernel vulnerabilities USN-991-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9911.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for quassel vulnerability USN-991-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 9.04 / 9.10 / 10.04 LTS : quassel vulnerability (USN-991-1)

Jima discovered that quassel would respond to a single privmsg containing multiple CTCP requests with multiple NOTICEs, possibly resulting in a denial of service against the IRC connection. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-991-1: quassel vulnerability

Jima discovered that quassel would respond to a single privmsg containing multiple CTCP requests with multiple NOTICEs, possibly resulting in a denial of service against the IRC connection...