CVE-2016-4414

HIGH 7.5CVE-2016-4414 · Published 13/06/2016 · updated 17/06/2026

In short

CVE-2016-4414 is a HIGH (CVSS 7.5) vulnerability affecting quassel (quassel-irc).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
quassel quassel-irc	`≤ 0.12.3`	No fix yet

Description

The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.

References

lists.fedoraproject.org/pipermail/package-announce/2016-May/183571.html
lists.fedoraproject.org/pipermail/package-announce/2016-May/183585.html
lists.fedoraproject.org/pipermail/package-announce/2016-May/183746.html
lists.opensuse.org/opensuse-updates/2016-05/msg00063.html
quassel-irc.org/node/129
openwall.com/lists/oss-security/2016/04/30/2
openwall.com/lists/oss-security/2016/04/30/4
quassel/quassel commit e678873 · Vendor Advisory

More vulnerabilities in quassel

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

quassel

quassel-irc

≤ 0.12.3

No fix yet

More vulnerabilities in quassel

See all →