PT-2018-9349 · Quassel+1 · Quassel+1

Publicado 2018-05-02 · Atualizado 2020-10-26 · CVE-2018-1000179

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions quassel version 0.12.4

Description A NULL Pointer Dereference issue exists in the handle function of CoreAuthHandler in coreauthhandler.cpp at line 235, allowing an attacker to cause a denial of service.

Recommendations For quassel version 0.12.4, consider disabling the CoreAuthHandler::handle() function as a temporary workaround until a patch is available.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2018-1000179

DSA-4189-1

MGASA-2018-0243

OPENSUSE-SU-2024:11291-1

USN-4594-1

Produtos afetados

Ubuntu

Quassel

Referências · 23

• 🔥 https://github.com/quassel/quassel/blob/master/src/core/coreauthhandler.cpp#L236 · Exploit
• https://github.com/quassel/quassel/commit/08bace4e9ecf08273f094c0c6aa8b3363d38ac3e · Nota
• https://github.com/quassel/quassel/commit/e17fca767d60c06ca02bc5898ced04f06d3670bd · Nota
• https://advisories.mageia.org/MGASA-2018-0243.html · Nota de Segurança
• http://openwall.com/lists/oss-security/2018/04/27/1 · Nota
• https://ubuntu.com/security/CVE-2018-1000179 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4594-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000179 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22957 · Nota
• https://quassel-irc.org/node/130 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-1000179 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000179 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1000179 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-4189-1 · Aviso do Fabricante
• https://debian.org/security/2018/dsa-4189 · Aviso do Fabricante