Lucene search

K
ubuntuUbuntuUSN-4594-1
HistoryOct 20, 2020 - 12:00 a.m.

Quassel vulnerabilities

2020-10-2000:00:00
ubuntu.com
43
quassel
vulnerabilities
ubuntu 18.04 esm
qdatastream protocol
login requests
remote code execution
denial of service

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.016

Percentile

87.5%

Releases

  • Ubuntu 18.04 ESM

Packages

  • quassel - distributed IRC client - monolithic core+client

Details

It was discovered that Quassel incorrectly handled Qdatastream protocol. A
remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-1000178)

It was discovered that Quassel incorrectly handled certain login requests.
A remote attacker could possibly use this issue to cause a denial of
service. (CVE-2018-1000179)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchquassel< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-client< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-client-dbgsym< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-core< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-core-dbgsym< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-data< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN
Ubuntu18.04noarchquassel-dbgsym< 1:0.12.4-3ubuntu1.18.04.3UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.016

Percentile

87.5%