CVE-2018-1000178

概要

参考情報

• quassel/quassel · Patch
• i.imgur.com/JJ4QcNq.png · Exploit
• lists.debian.org/debian-lts-announce/2018/05/msg00001.html · Mailing List
• security.gentoo.org/glsa/201806-04 · Third Party Advisory
• usn.ubuntu.com/4594-1
• debian.org/security/2018/dsa-4189 · Third Party Advisory

quassel のその他の脆弱性

• CVE-2021-34825高 7.5Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the…
• CVE-2018-1000179高 7.5A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) cor…
• CVE-2016-4414高 7.5The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL poi…
• CVE-2015-8547高 7.5The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of se…
• CVE-2015-3427高 7.5Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote at…