Quassel Remote Denial of Service Vulnerability (CVE-2015-2779)

Quassel Remote Denial of Service Vulnerability (CVE-2015-2779)
Quassel Remote Denial of Service Vulnerability (CVE-2015-2779)

Release date:
Updated on:

Affected Systems:

Quassel IRC Team Quassel 0.12-rc1

Description:

Bugtraq id: 74048
CVE (CAN) ID: CVE-2015-2779

Quassel is a cross-platform distributed IRC client based on the Qt4 framework.

The message splitting function of Quassel 0.12-rc1 has the stack depletion vulnerability. Remote attackers can construct messages to cause DOS.

<* Source: Pierre Schweitzer
*>

Suggestion:

Vendor patch:

Quassel IRC Team
----------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://github.com/quassel/quassel/commit/b5e38970ffd55e2dd9f706ce75af9a8d7730b1b8

This article permanently updates the link address: