Launchpad.net

CVE 2018-1000179

A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service.

Related bugs and status

CVE-2018-1000179 (Candidate) is related to these bugs:

Bug #1767539: Security fixes from 0.12.5 require backfit to earlier releases

		In	Importance	Status
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu)	High	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Bionic)	High	Confirmed
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Trusty)	High	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Xenial)	High	Confirmed
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Debian)	Unknown	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Cosmic)	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://github.com/qua...
DEBIAN: DSA-4189
GENTOO: GLSA-201806-04
UBUNTU: USN-4594-1