Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash) via a long CTCP query containing only multibyte characters.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade quassel | Jul 30, 2024 | Apr 10, 2015 |
| Suse | — | Upgrade quassel-clientUpgrade quassel-mono-debuginfoUpgrade quassel-baseUpgrade quassel-monoUpgrade quassel-debugsourceUpgrade quassel-coreUpgrade quassel-client-debuginfoUpgrade quassel-core-debuginfo | Dec 18, 2015 | Apr 8, 2015 |
| Ubuntu | — | Upgrade quassel | Nov 19, 2024 | Apr 10, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub