CVE-2014-8483

概要

参考情報

• bugs.quassel-irc.org/issues/1314 · Issue Tracking
• lists.opensuse.org/opensuse-updates/2014-11/msg00028.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2014-11/msg00046.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2015-03/msg00068.html · Third Party Advisory
• secunia.com/advisories/61932 · Permissions Required
• secunia.com/advisories/62035 · Permissions Required
• secunia.com/advisories/62261 · Permissions Required
• debian.org/security/2014/dsa-3063 · Third Party Advisory
• debian.org/security/2014/dsa-3068 · Third Party Advisory
• ubuntu.com/usn/USN-2401-1 · Third Party Advisory
• quassel/quassel commit 8b5ecd2 · Issue Tracking

quassel irc のその他の脆弱性

• CVE-2013-6404中 4.0Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows rem…
• CVE-2010-3443中 5.0ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via m…
• CVE-2013-4422中 6.8SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attacker…