NULL Pointer Dereference and Crash Vulnerability in Quassel before 0.12.4

NULL Pointer Dereference and Crash Vulnerability in Quassel before 0.12.4

CVE-2016-4414 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via invalid handshake data.

Learn more about our Web Application Penetration Testing UK.