CVE-2011-3354: The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers t...

Security readout for executives and security teams

CVE-2011-3354 is a remote crash flaw in Quassel IRC before 0.7.3. A crafted CTCP request could crash the Quassel core, interrupting IRC availability. Sources describe in-the-wild use in September 2011, but the bundle provides no current exploitation evidence. Exposure is mainly organizations still running Quassel IRC older than 0.7.3, especially internet-reachable or externally messaged IRC deployments. Asset tools may require package or binary version checks because the bundle lists no CPEs. Treat as a legacy availability risk. Prioritize remediation where Quassel supports operational communications or is internet-reachable; otherwise handle through normal vulnerability maintenance and legacy software cleanup. Mitigation focus: Upgrade Quassel to version 0.7.3 or later where available.; Review Ubuntu, Gentoo, or vendor package advisories for fixed builds.; Restrict external access to exposed Quassel core services where operationally feasible..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.