CVE-2016-4414

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2016-May/183571.html
• lists.fedoraproject.org/pipermail/package-announce/2016-May/183585.html
• lists.fedoraproject.org/pipermail/package-announce/2016-May/183746.html
• lists.opensuse.org/opensuse-updates/2016-05/msg00063.html
• quassel-irc.org/node/129
• openwall.com/lists/oss-security/2016/04/30/2
• openwall.com/lists/oss-security/2016/04/30/4
• quassel/quassel commit e678873 · Vendor Advisory

quassel のその他の脆弱性

• CVE-2021-34825高 7.5Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the…
• CVE-2018-1000179高 7.5A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) cor…
• CVE-2018-1000178緊急 9.8A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &m…
• CVE-2015-8547高 7.5The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of se…
• CVE-2015-3427高 7.5Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote at…