Launchpad CVE tracker

CVE 2018-1000178

A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.

Related bugs and status

CVE-2018-1000178 (Candidate) is related to these bugs:

Bug #1767539: Security fixes from 0.12.5 require backfit to earlier releases

		In	Importance	Status
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu)	High	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Bionic)	High	Confirmed
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Trusty)	High	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Xenial)	High	Confirmed
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Debian)	Unknown	Fix Released
1767539	Security fixes from 0.12.5 require backfit to earlier releases	quassel (Ubuntu Cosmic)	High	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2018-1000178

References