GCVE-110-MAGEIA-2015-175

Advisory Published

Vulnetix · Advisory published April 30, 2015

Updated quassel packages fix security vulnerability: Quassel is vulnerable to SQL injection through its use of Qt's postgres driver. If the PostgreSQL server is restarted or the connection is lost at any point, other IRC users may be able to trick the Quassel core into executing SQL queries upon reconnection (CVE-2015-3427).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	quassel	0 (affected), 0.9.2-1.3.mga4 (unaffected)	—

References

Updated quassel packages fix CVE-2015-3427

advisory

Updated quassel packages fix CVE-2015-3427

issue

Updated quassel packages fix CVE-2015-3427

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON