Home/Product/quassel irc quassel
Product

quassel irc quassel

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2021-34825
<= 0.13.1
Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not fo
7.5HIGH
CVE-2018-1000179
all versions
A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login
7.5HIGH
CVE-2018-1000178
all versions
A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QBy
9.8CRITICAL
CVE-2016-4414
<= 0.12.3
The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service
7.5HIGH
CVE-2015-8547
<= 0.10.0
The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a de
7.5HIGH
CVE-2015-3427
<= 0.12.1
Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows
CVE-2015-2779
<= 0.11.0
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause
CVE-2015-2778
<= 0.11.0
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial
CVE-2011-3354
<= 0.7.2
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of ser
CVE-2008-5657
<= 0.3.0.2
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a cra
threatengine.sh