CVE-2016-4414

High

Published: 13/06/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The onReadyRead function in core/coreauthhandler.cpp in Quassel before version 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.

Risk Assessment

Attackers can exploit this vulnerability to remotely crash the server, leading to service downtime.

Recommendation

It is recommended to update Quassel to version 0.12.4 or later to mitigate this vulnerability.

Other vulnerabilities in Quassel

CVE-2015-8547High
The CoreUserInputHandler::doMode function in Quassel 0.10.0 allows remote attackers to cause an application crash via the "/op *" command in a query.

Original NVD description (English source)

The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.