cbcvebase.
CVE-2014-8483
published 2014-11-06

CVE-2014-8483: The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed…

PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.55%
88.0th percentile
The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string.

Affected

16 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux——
debiandebian_linux——
debiankonversation< konversation 1.5-2 (bookworm)konversation 1.5-2 (bookworm)
debianquassel< konversation 1.5-2 (bookworm)konversation 1.5-2 (bookworm)
konversationkonversation>= 0 < 1.5-21.5-2
konversationkonversation>= 0 < 1.5-21.5-2
konversationkonversation>= 0 < 1.5-21.5-2
konversationkonversation>= 0 < 1.5-21.5-2
opensuseopensuse——
opensuseopensuse——
opensuseopensuse——
quassel-ircquassel>= 0 < 0.10.0-2.10.10.0-2.1
quassel-ircquassel>= 0 < 0.10.0-2.10.10.0-2.1
quassel-ircquassel>= 0 < 0.10.0-2.10.10.0-2.1
quassel-ircquassel>= 0 < 0.10.0-2.10.10.0-2.1
quassel-ircquassel_irc——

CVSS provenance

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.