SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.

The distributed IRC client quassel was updated to fix one security issue.

The following vulnerability was fixed :

  - CVE-2015-3427: The SQL injection fix for CVE-2013-4422     was incomplete (boo#928728)

Update to latest release of Quassel from upstream. Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL
- quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL - quassel IRC Fix CVE-2013-4422 - Postgresql, possible SQL injection vulnerability New package for EPEL
- quassel IRC

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201311-03 (Quassel: Multiple Vulnerabilities)

    Two vulnerabilities have been found in Quassel:
      Quassel does not properly handle multiple CTCP requests         (CVE-2010-3443).
      Quassel, when used with certain versions of Qt and PostgreSQL, does         not sanitize user input (CVE-2013-4422).
  Impact :

    A remote attacker could send multiple CTCP requests in single private       message, possibly resulting in a Denial of Service condition. Futhermore,       a remote attacker may be able to execute arbitrary SQL statements.
  Workaround :

    There is no known workaround at this time.

Quassel IRC developers report :

SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message.

ID	Name	Product	Family	Severity
83802	openSUSE Security Update : quassel (openSUSE-2015-376)	Nessus	SuSE Local Security Checks	high
72716	Fedora 20 : quassel-0.9.2-1.fc20 (2014-1742)	Nessus	Fedora Local Security Checks	medium
72715	Fedora 19 : quassel-0.9.2-1.fc19 (2014-1734)	Nessus	Fedora Local Security Checks	medium
70778	GLSA-201311-03 : Quassel: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	medium
70777	FreeBSD : Quassel IRC -- SQL injection vulnerability (f969bad7-46fc-11e3-b6ee-00269ee29e57)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2013-4422

critical

Tenable Plugins

high

medium

medium

medium

medium