CVE Feed

    Dashboard / CVE / CVE-2015-2779

    CVE-2015-2779

    Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via a crafted massage.

    Published:Apr 10, 2015
    Last Modified:Apr 12, 2025
    EPS:Apr 10, 2015
    EPSS Score:0.01703
    CVSS Score:5

    Affected Products

    Vendor
    Quassel-irc
    Product
    Quassel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-34825 (CVSS 7.5) — Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 c…
    CVE-2018-1000178 (CVSS 9.8) — A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::proc…
    CVE-2018-1000179 (CVSS 7.5) — A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler…
    CVE-2016-4414 (CVSS 7.5) — The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause…
    CVE-2015-8547 (CVSS 7.5) — The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote att…
    CVE-2015-3427 (CVSS 7.5) — Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is res…
    CVE-2015-2778 (CVSS 5) — Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attacke…
    CVE-2011-3354 (CVSS 5) — The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to c…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163054.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158666.html
    http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html
    http://www.openwall.com/lists/oss-security/2015/03/20/12
    http://www.openwall.com/lists/oss-security/2015/03/27/11
    http://www.openwall.com/lists/oss-security/2015/03/28/3
    http://www.securityfocus.com/bid/74048
    https://github.com/quassel/quassel/commit/b5e38970ffd55e2dd9f706ce75af9a8d7730b1b8
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163054.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158666.html
    http://lists.opensuse.org/opensuse-updates/2015-04/msg00018.html
    http://www.openwall.com/lists/oss-security/2015/03/20/12
    http://www.openwall.com/lists/oss-security/2015/03/27/11
    http://www.openwall.com/lists/oss-security/2015/03/28/3
    http://www.securityfocus.com/bid/74048
    https://github.com/quassel/quassel/commit/b5e38970ffd55e2dd9f706ce75af9a8d7730b1b8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High