Skip to main content

Quassel CVE-2015-8547

HIGH
DEPRECATED: Code (CWE-17)
2016-01-08 cve@mitre.org
Denial Of Service Quassel Leap Opensuse
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jan 08, 2016 - 19:59 cve.org
HIGH 7.5

DescriptionCVE.org

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a query.

AnalysisAI

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-17. The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a query. Affected products include: Quassel-Irc Quassel, Opensuse Leap, Opensuse.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Quassel

View all
CVE-2018-1000178 CRITICAL POC
9.8 May 08

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage
CVE-2021-34825 HIGH POC
7.5 Jun 17

Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate
CVE-2018-1000179 HIGH POC
7.5 May 08

A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(c
CVE-2016-4414 HIGH
7.5 Jun 13

The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial

CVE-2015-3427 HIGH
7.5 May 14

Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, wh
CVE-2015-2779 MEDIUM
5.0 Apr 10

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attacker
CVE-2015-2778 MEDIUM
5.0 Apr 10

Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to caus

Same weakness CWE-17 – DEPRECATED: Code

View all
CVE-2015-0240 CRITICAL POC
10.0
CVE-2014-9222 CRITICAL POC
10.0
CVE-2014-9707 HIGH POC
7.5
CVE-2015-3292 CRITICAL POC
10.0
CVE-2015-2682 MEDIUM POC
5.0
CVE-2015-4335 CRITICAL POC
10.0
CVE-2015-1728 CRITICAL
9.3
CVE-2014-9296 MEDIUM POC
5.0

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2015-8547 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy