CVE-2015-3427: Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is...

Security readout for executives and security teams

CVE-2015-3427 affects Quassel IRC versions before 0.12.2 when using PostgreSQL. After the database is restarted, Quassel may mishandle its database session, allowing a remote attacker to trigger SQL injection through a crafted IRC message. Public sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely limited to Quassel core/server deployments before 0.12.2 that use PostgreSQL. Installations not running Quassel, already updated to 0.12.2 or later, or not using PostgreSQL appear less relevant based on the provided sources. Prioritize remediation where Quassel is internet-facing or reachable by untrusted users. Business urgency is uncertain because no CVSS or exploitation evidence is provided, but SQL injection can threaten service data integrity and confidentiality. Mitigation focus: Upgrade Quassel to 0.12.2 or later where applicable.; Apply Debian DSA-3258 packages if running affected Debian builds.; Identify Quassel deployments using PostgreSQL backends..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.