Quassel Core CTCP Remote Denial of Service Vulnerability

Bugtraq ID:	49526
Class:	Input Validation Error
CVE:	CVE-2011-3354
Remote:	Yes
Local:	No
Published:	Sep 08 2011 12:00AM
Updated:	May 07 2015 05:12PM
Credit:	Alex Legler
Vulnerable:	Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64
Not Vulnerable:

Quassel Core CTCP Remote Denial of Service Vulnerability

Quassel is prone to a denial-of-service vulnerability.

An attacker may exploit this issue to crash the affected application, denying service to legitimate users.

This issue exists in versions prior to Quassel 0.7.3 is vulnerable; other versions may also be affected.

Quassel Core CTCP Remote Denial of Service Vulnerability

An attacker may exploit this issue using readily available network utilities.

Quassel Core CTCP Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Quassel Core CTCP Remote Denial of Service Vulnerability

References:

• Quassel Homepage (Quassel IRC Team)
  
• net-irc/quassel-0.7.3 CTCP request Core DoS (CVE requested) (Alex Legler)