Summary
It was discovered that Quassel incorrectly handled Qdatastream protocol. A
remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-1000178)
It was discovered that Quassel incorrectly handled certain login requests.
A remote attacker could possibly use this issue to cause a denial of
service. (CVE-2018-1000179)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | quassel | 1:0.12.4-3ubuntu1.18.04.3 |
Vulnerabilities 2
-
Unscored —
A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessag…
-
Unscored —
A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(…