CVE-2015-2779

Description

References

• lists.fedoraproject.org/pipermail/package-announce/2015-August/163054.html
• lists.fedoraproject.org/pipermail/package-announce/2015-May/158666.html
• lists.opensuse.org/opensuse-updates/2015-04/msg00018.html
• openwall.com/lists/oss-security/2015/03/20/12
• openwall.com/lists/oss-security/2015/03/27/11
• openwall.com/lists/oss-security/2015/03/28/3
• securityfocus.com/bid/74048
• quassel/quassel commit b5e3897

quassel의 다른 취약점

• CVE-2021-34825높음 7.5Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the…
• CVE-2018-1000179높음 7.5A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) cor…
• CVE-2018-1000178심각 9.8A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &m…
• CVE-2016-4414높음 7.5The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL poi…
• CVE-2015-8547높음 7.5The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of se…