CVE-2015-8547

High

Published: 08/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The CoreUserInputHandler::doMode function in Quassel 0.10.0 allows remote attackers to cause an application crash via the "/op *" command in a query.

Risk Assessment

Attackers can exploit this vulnerability to remotely trigger an application crash, leading to service downtime.

Recommendation

It is recommended to update Quassel to the latest version to mitigate this vulnerability.

Other vulnerabilities in Quassel 0.10.0

CVE-2016-4414High
The onReadyRead function in core/coreauthhandler.cpp in Quassel before version 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.

Original NVD description (English source)

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a query.