CVE-2008-5657
EPSS 1.4%
Description
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.
How to fix CVE-2008-5657
To remediate CVE-2008-5657, upgrade the affected package to a fixed version below.
- Debian/quassel—upgrade to 0.2~rc1-1.1 or later
Is CVE-2008-5657 being exploited?
Low — EPSS is 1.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.2~rc1-1.1