A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void     DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker     to execute code remotely. (CVE-2018-1000178)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4594-1 advisory.

    It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly     use this issue to execute arbitrary code. (CVE-2018-1000178)

    It was discovered that Quassel incorrectly handled certain login requests. A remote attacker could     possibly use this issue to cause a denial of service. (CVE-2018-1000179)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201806-04 (Quassel: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Quassel. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause arbitrary code execution or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

It was found that the Quassel IRC client was vulnerable to a remote code execution vulnerability due to insufficient checks in the deserializer code.

For Debian 7 'Wheezy', these problems have been fixed in version 0.8.0-1+deb7u4.

We recommend that you upgrade your quassel packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two vulnerabilities were found in the Quassel IRC client, which could result in the execution of arbitrary code or denial of service.

Note that you need to restart the 'quasselcore' service after upgrading the Quassel packages.

This update for quassel fixes the following issues :

Security fixes (boo#1090495) :

  - CVE-2018-1000178: A heap metadata corruption in     qdatastream could have been exploited to launch an     unauthenticated remote code execution

  - CVE-2018-1000179: A remote attacker could have caused a     Denial of Service attack by initiating login attempts     before the core got initialized

The following tracked packaging change is included :

  - boo#1069468: no longer use /var/adm/fillup-templates

This update also includes various small bug fixes in the upstream 0.12.4 release.

ID	Name	Product	Family	Severity
259229	Linux Distros Unpatched Vulnerability : CVE-2018-1000178	Nessus	Misc.	critical
141620	Ubuntu 18.04 LTS : Quassel vulnerabilities (USN-4594-1)	Nessus	Ubuntu Local Security Checks	critical
110525	GLSA-201806-04 : Quassel: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
109584	Debian DLA-1370-1 : quassel security update	Nessus	Debian Local Security Checks	critical
109556	Debian DSA-4189-1 : quassel - security update	Nessus	Debian Local Security Checks	critical
109536	openSUSE Security Update : quassel (openSUSE-2018-409)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-1000178

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical