CVE-2014-8483

The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string.

• CWE-125

• http://bugs.quassel-irc.org/issues/1314Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00046.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.htmlThird Party Advisory
• http://secunia.com/advisories/61932Permissions Required, Third Party Advisory
• http://secunia.com/advisories/62035Permissions Required, Third Party Advisory
• http://secunia.com/advisories/62261Permissions Required, Third Party Advisory
• http://www.debian.org/security/2014/dsa-3063Third Party Advisory
• http://www.debian.org/security/2014/dsa-3068Third Party Advisory
• http://www.ubuntu.com/usn/USN-2401-1Third Party Advisory
• https://github.com/quassel/quassel/commit/8b5ecd226f9208af3074b33d3b7cf5e14f55b138Issue Tracking, Patch
• http://bugs.quassel-irc.org/issues/1314Issue Tracking, Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00028.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00046.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.htmlThird Party Advisory
• http://secunia.com/advisories/61932Permissions Required, Third Party Advisory
• http://secunia.com/advisories/62035Permissions Required, Third Party Advisory
• http://secunia.com/advisories/62261Permissions Required, Third Party Advisory
• http://www.debian.org/security/2014/dsa-3063Third Party Advisory
• http://www.debian.org/security/2014/dsa-3068Third Party Advisory
• http://www.ubuntu.com/usn/USN-2401-1Third Party Advisory
• https://github.com/quassel/quassel/commit/8b5ecd226f9208af3074b33d3b7cf5e14f55b138Issue Tracking, Patch

Published

Nov 6, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8475FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerb…
• CVE-2014-8476The setlogin function in FreeBSD 8.4 through 10.1-RC4 does n…
• CVE-2014-8478The web server on Siemens SCALANCE X-300 switches with firmw…
• CVE-2014-8479The FTP server on Siemens SCALANCE X-300 switches with firmw…
• CVE-2014-8480The instruction decoder in arch/x86/kvm/emulate.c in the KVM…
• CVE-2014-8481The instruction decoder in arch/x86/kvm/emulate.c in the KVM…
• CVE-2014-8484The srec_scan function in bfd/srec.c in libdbfd in GNU binut…
• CVE-2014-8485The setup_group function in bfd/elf.c in libbfd in GNU binut…
• CVE-2014-8486Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-8487Kony Management (aka Enterprise Mobile Management or EMM) 1.…
• CVE-2014-8488Cross-site scripting (XSS) vulnerability in the administrato…
• CVE-2014-8489Open redirect vulnerability in startSSO.ping in the SP Endpo…