3 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2021-34825

https://notcve.org/view.php?id=CVE-2021-34825

17 Jun 2021 — Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system. Quassel versiones hasta 0.13.1, cuando --require-ssl está habilitado, se lanza sin soporte SSL o TLS si no es encontrado un certificado X.509 usable en el sistema local • https://github.com/quassel/quassel/pull/581 • CWE-319: Cleartext Transmission of Sensitive Information •

CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 1

CVE-2018-1000178 – Ubuntu Security Notice USN-4594-1

https://notcve.org/view.php?id=CVE-2018-1000178

04 May 2018 — A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely. Existe una corrupción de memoria dinámica (heap) de tipo CWE-120 en quassel 0.12.4 en quasselcore en void DataStreamPeer::processMessage(const QByteArray msg) datastreampeer.cpp en la línea 62 que permite que un atacante ejecute código remotamente. It was discovered that Quassel incorrectly... • https://github.com/quassel/quassel/blob/master/src/common/protocols/datastream/datastreampeer.cpp#L62 • CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2018-1000179 – Ubuntu Security Notice USN-4594-1

https://notcve.org/view.php?id=CVE-2018-1000179

04 May 2018 — A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service. Existe una desreferencia de puntero NULL de tipo CWE-476 en quassel 0.12.4 en quasselcore en void DataStreamPeer::processMessage(const QByteArray msg) datastreampeer.cpp line 235 que permite que un atacante provoque una denegación de servicio (DoS). It was discovered that Quassel incorrectly... • https://github.com/quassel/quassel/blob/master/src/core/coreauthhandler.cpp#L236 • CWE-476: NULL Pointer Dereference •