VDB
CVE-2010-3443
CVE-2010-3443
PUBLISHED
CVSS 5 MEDIUM
ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via multiple Client-To-Client Protocol (CTCP) requests in a PRIVMSG message.
EPSS 1.19% · 79.2th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
1.19%
79.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| canonical | ubuntu_linux | 9.04, 10.04, 9.10 |
| n/a | n/a | n/a |
| quassel-irc | quassel_irc | 0.4.1, 0.4.2, 0.5.0 |
Timeline
- Nov 23, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- http://quassel-irc.org/node/115 url
- USN-991-1 vendor-advisory
- http://git.quassel-irc.org/?p=quassel.git%3Ba=commitdiff%3Bh=a4ca568cdf68cf4a0343eb161518dc8e50cea87d url
- http://bugs.quassel-irc.org/issues/1023 url
- http://bugs.quassel-irc.org/issues/1024 url
- 55581 third-party-advisory
- GLSA-201311-03 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-3443 advisory
- http://git.quassel-irc.org/?p=quassel.git;a=commitdiff;h=a4ca568cdf68cf4a0343eb161518dc8e50cea87d url