« Volver al listado

CVE-2011-3354

Estado: ModificadaMedia (5)—

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Quassel-irc — Quassel

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-3354",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-10-04T10:55:09.990",
  "references": [
    {
      "url": "http://bugs.quassel-irc.org/projects/quassel-irc/repository/revisions/da215fcb9cd3096a3e223c87577d5d4ab8f8518b/diff/src/core/ctcpparser.cpp",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://osvdb.org/75351",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/45970",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/09/08/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/09/09/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/49526",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1200-1",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=382313",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69682",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.quassel-irc.org/projects/quassel-irc/repository/revisions/da215fcb9cd3096a3e223c87577d5d4ab8f8518b/diff/src/core/ctcpparser.cpp",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/75351",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/45970",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/09/08/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/09/09/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/49526",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1200-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.gentoo.org/show_bug.cgi?id=382313",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69682",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011."
    },
    {
      "lang": "es",
      "value": "El método CtcpParser::packedReply en core/ctcpparser.cpp en Quassel anterior a v0.7.3 permite a atacantes remotos causar una denegación de servicio (caída) a través de una petición (Client-To-Client Protocol, CTCP) manipulada como se demostró en septiembre de 2011."
    }
  ],
  "lastModified": "2026-06-16T23:33:08.003",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6600ADB-EC8E-400D-B5C6-2E70A2DD10B9",
              "versionEndIncluding": "0.7.2"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8CEE378-4AF3-460B-983A-99ABC3FAB0A5"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E0D72A3-0BE8-491E-BA40-DF3048B38664"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AE5E456-0265-4680-B74B-BE41DEF4E4E3"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43387717-B4F1-458D-952D-A488B68A42BD"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C7CDBAF-7E56-4E28-89BB-40345D44224A"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "382FDF17-58BA-494F-965B-AE89536AD355"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2FDCEE3-3196-4FD3-8947-BA0A8AC13C79"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "958D78B5-F69C-4B62-B442-D73081C37E28"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C079B355-6BFB-4EBC-916D-B3CD6C825D38"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79524C6D-EE5D-42EF-9BCF-1E878026DA21"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0E50F5F-6E73-4447-A437-B6825A2581E1"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1929DC3-9B22-40FB-9027-16A472D5791F"
            },
            {
              "criteria": "cpe:2.3:a:quassel-irc:quassel:0.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "991CC3AE-CE18-4256-9666-1F0A08532D55"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}