CVE-2010-3443: Medium severity Quassel-irc Quassel Irc vulnerability
Published Nov 23, 2013
·Updated
ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via multiple Client-To-Client Protocol (CTCP) requests in a PRIVMSG message.
Affected Software
17 affected components
Quassel-irc Quassel Irc=0.4.1
Quassel-irc Quassel Irc=0.3.0.1
Quassel-irc Quassel Irc=0.4.3
Quassel-irc Quassel Irc=0.3.0.3
Quassel-irc Quassel Irc=0.3.0
Quassel-irc Quassel Irc=0.1.0
Quassel-irc Quassel Irc<=0.6.2
Quassel-irc Quassel Irc=0.5.0
Quassel-irc Quassel Irc=0.6.1
Quassel-irc Quassel Irc=0.3.1
Quassel-irc Quassel Irc=0.7.0
Quassel-irc Quassel Irc=0.4.0
Quassel-irc Quassel Irc=0.3.0.2
Quassel-irc Quassel Irc=0.4.2
Canonical Ubuntu Linux=9.04
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=9.10
Remediation
Patch Available
Event History
Nov 23, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3443?
CVE-2010-3443 has a medium severity level as it allows remote attackers to cause a denial of service affecting IRC functionality.
2
How do I fix CVE-2010-3443?
To fix CVE-2010-3443, upgrade Quassel to version 0.6.3 or higher.
3
Which versions of Quassel are affected by CVE-2010-3443?
CVE-2010-3443 affects Quassel versions prior to 0.6.3 and all versions of 0.7.x before 0.7.1.
4
What kind of attack does CVE-2010-3443 involve?
CVE-2010-3443 involves a denial of service attack, exploiting multiple CTCP requests in a PRIVMSG message.
5
Is there a way to mitigate CVE-2010-3443 without upgrading?
Currently, the most effective mitigation for CVE-2010-3443 is to upgrade the software to a secure version.