A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4594-1 advisory.

    It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly     use this issue to execute arbitrary code. (CVE-2018-1000178)

    It was discovered that Quassel incorrectly handled certain login requests. A remote attacker could     possibly use this issue to cause a denial of service. (CVE-2018-1000179)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201806-04 (Quassel: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Quassel. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could cause arbitrary code execution or a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

Two vulnerabilities were found in the Quassel IRC client, which could result in the execution of arbitrary code or denial of service.

Note that you need to restart the 'quasselcore' service after upgrading the Quassel packages.

This update for quassel fixes the following issues :

Security fixes (boo#1090495) :

  - CVE-2018-1000178: A heap metadata corruption in     qdatastream could have been exploited to launch an     unauthenticated remote code execution

  - CVE-2018-1000179: A remote attacker could have caused a     Denial of Service attack by initiating login attempts     before the core got initialized

The following tracked packaging change is included :

  - boo#1069468: no longer use /var/adm/fillup-templates

This update also includes various small bug fixes in the upstream 0.12.4 release.

ID	Name	Product	Family	Severity
141620	Ubuntu 18.04 LTS : Quassel vulnerabilities (USN-4594-1)	Nessus	Ubuntu Local Security Checks	critical
110525	GLSA-201806-04 : Quassel: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
109556	Debian DSA-4189-1 : quassel - security update	Nessus	Debian Local Security Checks	critical
109536	openSUSE Security Update : quassel (openSUSE-2018-409)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2018-1000179

high

Tenable Plugins

critical

critical

critical

critical