Critical severity9.8OSV Advisory· Published May 8, 2018· Updated Jun 17, 2026
CVE-2018-1000178
CVE-2018-1000178
Description
A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20.10-beta1, 0.10-pre, 0.10-rc1, …+ 1 more
- (no CPE)range: 0.10-beta1, 0.10-pre, 0.10-rc1, …
- (no CPE)range: = 0.12.4
Patches
Vulnerability mechanics
References
6- github.com/quassel/quassel/blob/master/src/common/protocols/datastream/datastreampeer.cppnvdPatchThird Party Advisory
- i.imgur.com/JJ4QcNq.pngnvdExploitThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/05/msg00001.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201806-04nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4189nvdThird Party Advisory
- usn.ubuntu.com/4594-1/nvd
News mentions
0No linked articles in our index yet.