CVE-2011-3354
published 2011-10-04CVE-2011-3354: The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted…
PriorityP421medium5CVSS 2.0
AVNACLAuNCNINAP
ITW
Exploited in the wild
EPSS
2.07%
79.5th percentile
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | quassel | < quassel 0.7.3-1 (bookworm) | quassel 0.7.3-1 (bookworm) |
| quassel-irc | quassel | <= 0.7.2 | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | — | — |
| quassel-irc | quassel | >= 0 < 0.7.3-1 | 0.7.3-1 |
| quassel-irc | quassel | >= 0 < 0.7.3-1 | 0.7.3-1 |
| quassel-irc | quassel | >= 0 < 0.7.3-1 | 0.7.3-1 |
| quassel-irc | quassel | >= 0 < 0.7.3-1 | 0.7.3-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2011-3354: quassel - The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7....
vendor_debian·2011·CVSS 5.0
CVE-2011-3354 [MEDIUM] CVE-2011-3354: quassel - The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7....
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.
Scope: local
bookworm: resolved (fixed in 0.7.3-1)
bullseye: resolved (fixed in 0.7.3-1)
forky: resolved (fixed in 0.7.3-1)
sid: resolved (fixed in 0.7.3-1)
trixie: resolved (fixed in 0.7.3-1)
GHSA
GHSA-6pg7-8crq-hwmr: The CtcpParser::packedReply method in core/ctcpparser
ghsa_unreviewed·2022-05-17
CVE-2011-3354 [MEDIUM] GHSA-6pg7-8crq-hwmr: The CtcpParser::packedReply method in core/ctcpparser
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.
OSV
CVE-2011-3354: The CtcpParser::packedReply method in core/ctcpparser
osv·2011-10-04·CVSS 5.0
CVE-2011-3354 [MEDIUM] CVE-2011-3354: The CtcpParser::packedReply method in core/ctcpparser
The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.
No detection rules found.
No public exploits indexed.
http://bugs.quassel-irc.org/projects/quassel-irc/repository/revisions/da215fcb9cd3096a3e223c87577d5d4ab8f8518b/diff/src/core/ctcpparser.cpphttp://osvdb.org/75351http://secunia.com/advisories/45970http://www.openwall.com/lists/oss-security/2011/09/08/7http://www.openwall.com/lists/oss-security/2011/09/09/7http://www.securityfocus.com/bid/49526http://www.ubuntu.com/usn/USN-1200-1https://bugs.gentoo.org/show_bug.cgi?id=382313https://exchange.xforce.ibmcloud.com/vulnerabilities/69682http://bugs.quassel-irc.org/projects/quassel-irc/repository/revisions/da215fcb9cd3096a3e223c87577d5d4ab8f8518b/diff/src/core/ctcpparser.cpphttp://osvdb.org/75351http://secunia.com/advisories/45970http://www.openwall.com/lists/oss-security/2011/09/08/7http://www.openwall.com/lists/oss-security/2011/09/09/7http://www.securityfocus.com/bid/49526http://www.ubuntu.com/usn/USN-1200-1https://bugs.gentoo.org/show_bug.cgi?id=382313https://exchange.xforce.ibmcloud.com/vulnerabilities/69682
2011-10-04
Published
Exploited in the wild