The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of service (application crash) via the /op * command in a query.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Quassel | Quassel-irc | * | 0.10.0 (including) |
| Quassel | Ubuntu | esm-apps/xenial | * |
| Quassel | Ubuntu | precise | * |
| Quassel | Ubuntu | trusty | * |
| Quassel | Ubuntu | upstream | * |
| Quassel | Ubuntu | vivid | * |
| Quassel | Ubuntu | wily | * |
| Quassel | Ubuntu | xenial | * |
| Quassel | Ubuntu | yakkety | * |
| Quassel | Ubuntu | zesty | * |