Description
The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.
References (8)
Core 8
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/04/30/4
Vendor Advisory x_refsource_confirm
https://github.com/quassel/quassel/commit/e678873
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2016-05/msg00063.html
Various Sources x_refsource_confirm
http://quassel-irc.org/node/129
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183746.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/04/30/2
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183571.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183585.html
Scores
CVSS v3
7.5
EPSS
0.0290
EPSS Percentile
86.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (6)
fedoraproject/fedora
22
fedoraproject/fedora
23
fedoraproject/fedora
24
opensuse/leap
42.1
opensuse/opensuse
13.2
quassel-irc/quassel
< 0.12.3
Published
Jun 13, 2016
Tracked Since
Feb 18, 2026