Known Vulnerabilities for products from Quassel-irc

Listed below are 13 of the newest known vulnerabilities associated with the vendor "Quassel-irc".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-34825 json Quassel through 0.13.1, when --require-ssl is enabled, launches without SSL or TLS support if a usable X.509 certificate is n... 7.5 - HIGH 2021-06-17 2023-11-07
CVE-2018-1000179 json A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const ... 7.5 - HIGH 2018-05-08 2020-10-26
CVE-2018-1000178 json A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(cons... 9.8 - CRITICAL 2018-05-08 2020-10-26
CVE-2016-4414 json The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of se... Not Provided 2016-06-13 2026-05-06
CVE-2015-8547 json The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause... Not Provided 2016-01-08 2026-05-06
CVE-2015-3427 json Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which a... Not Provided 2015-05-14 2026-05-06
CVE-2015-2779 json Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to ... Not Provided 2015-04-10 2026-05-06
CVE-2015-2778 json Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a d... Not Provided 2015-04-10 2026-05-06
CVE-2014-8483 json The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-o... Not Provided 2014-11-06 2026-05-06
CVE-2013-6404 json Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, w... Not Provided 2013-12-09 2026-04-29
CVE-2013-4422 json SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows ... Not Provided 2013-10-23 2026-04-29
CVE-2011-3354 json The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial o... Not Provided 2011-10-04 2026-04-29
CVE-2010-3443 json ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unrespon... Not Provided 2013-11-23 2026-04-29

Known software with vulnerabilities from Quassel-irc

Type Vendor Product Version
ApplicationQuassel-ircQuassel0.1.0
ApplicationQuassel-ircQuassel Irc0.1.0

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report