A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void     CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a     denial of service. (CVE-2018-1000179)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void
    DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker
    to execute code remotely. (CVE-2018-1000178)

  - A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void
    CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a
    denial of service. (CVE-2018-1000179)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4594-1 advisory.

    It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly     use this issue to execute arbitrary code. (CVE-2018-1000178)

    It was discovered that Quassel incorrectly handled certain login requests. A remote attacker could     possibly use this issue to cause a denial of service. (CVE-2018-1000179)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201806-04 (Quassel: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Quassel. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause arbitrary code execution or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

Two vulnerabilities were found in the Quassel IRC client, which could result in the execution of arbitrary code or denial of service.

Note that you need to restart the 'quasselcore' service after upgrading the Quassel packages.

This update for quassel fixes the following issues :

Security fixes (boo#1090495) :

  - CVE-2018-1000178: A heap metadata corruption in     qdatastream could have been exploited to launch an     unauthenticated remote code execution

  - CVE-2018-1000179: A remote attacker could have caused a     Denial of Service attack by initiating login attempts     before the core got initialized

The following tracked packaging change is included :

  - boo#1069468: no longer use /var/adm/fillup-templates

This update also includes various small bug fixes in the upstream 0.12.4 release.

ID	Name	Product	Family	Severity
257103	Linux Distros Unpatched Vulnerability : CVE-2018-1000179	Nessus	Misc.	high
406871	Alpine: multiple quassel packages: security update to 0.12.5.-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
406871	Alpine: multiple quassel packages: security update to 0.12.5.-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
141620	Ubuntu 18.04 LTS : Quassel vulnerabilities (USN-4594-1)	Nessus	Ubuntu Local Security Checks	critical
110525	GLSA-201806-04 : Quassel: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
109556	Debian DSA-4189-1 : quassel - security update	Nessus	Debian Local Security Checks	critical
109536	openSUSE Security Update : quassel (openSUSE-2018-409)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-1000179

high

Tenable Plugins

high

critical

critical

critical

critical

critical

critical