Approved changes feed: RSS · Atom

cpe:2.3:a:quassel-irc:quassel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuassel Irc (c8accda6-6207-5998-b76f-46c0fbd5763c)
ProductQuassel (aa9c2b81-2298-5559-97ff-b6743fc50089)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/quassel purl2cpe 2026-06-01 10:16:09.349351
pkg:github/quassel/quassel purl2cpe 2026-06-01 10:16:09.349354
pkg:rpm/fedora/quassel purl2cpe 2026-06-01 10:16:09.349357
pkg:rpm/opensuse/quassel purl2cpe 2026-06-01 10:16:09.349359

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34825 vulnerable 2026-06-08 05:32:17.027028 Details available
Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is not found on the local system.
Published: 2021-06-17T13:25:39.000Z
Updated: 2024-08-04T00:26:53.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4414 vulnerable 2026-06-08 05:07:47.372214 Details available
The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.
Published: 2016-06-13T19:00:00.000Z
Updated: 2024-08-06T00:25:14.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8547 vulnerable 2026-06-08 05:07:04.339141 Details available
The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the "/op *" command in a query.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-08-06T08:20:43.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3427 vulnerable 2026-06-08 05:06:38.283457 Details available
Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422.
Published: 2015-05-14T14:00:00.000Z
Updated: 2024-08-06T05:47:57.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2779 vulnerable 2026-06-08 05:06:35.799341 Details available
Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via a crafted massage.
Published: 2015-04-10T14:00:00.000Z
Updated: 2024-08-06T05:24:38.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2778 vulnerable 2026-06-08 05:06:35.798835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3354 vulnerable 2026-06-08 04:59:24.826770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.