CVE-2015-8547 | Vulnerability Database | Aqua Security

The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the /op * command in a query.

Affected Software

Name	Vendor	Start Version	End Version
Quassel	Quassel-irc	*	0.10.0 (including)
Quassel	Ubuntu	esm-apps/xenial	*
Quassel	Ubuntu	precise	*
Quassel	Ubuntu	trusty	*
Quassel	Ubuntu	upstream	*
Quassel	Ubuntu	vivid	*
Quassel	Ubuntu	wily	*
Quassel	Ubuntu	xenial	*
Quassel	Ubuntu	yakkety	*
Quassel	Ubuntu	zesty	*

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174938.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174976.html
http://lists.opensuse.org/opensuse-updates/2015-12/msg00099.html
http://www.openwall.com/lists/oss-security/2015/12/12/1
http://www.openwall.com/lists/oss-security/2015/12/13/1
https://github.com/quassel/quassel/commit/b8edbda019eeb99da8663193e224efc9d1265dc7
https://github.com/quassel/quassel/pull/153
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174938.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174976.html
http://lists.opensuse.org/opensuse-updates/2015-12/msg00099.html
http://www.openwall.com/lists/oss-security/2015/12/12/1
http://www.openwall.com/lists/oss-security/2015/12/13/1
https://github.com/quassel/quassel/commit/b8edbda019eeb99da8663193e224efc9d1265dc7
https://github.com/quassel/quassel/pull/153

NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-8547
CWE	https://cwe.mitre.org/data/definitions/17.html