Debian/quassel: high 7.5

The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.

Action: Upgrade quassel to 1:0.12.4-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2016-4414
• https://security-tracker.debian.org/tracker/CVE-2016-4414

published 2016-06-13T19:59:08.003Z · modified 2026-09-22T07:02:04.883546Z · JSON