CVE-2015-3427: Debian Linux

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Quassel before 0.12.2 does not properly re-initialize the database session when the PostgreSQL database is restarted, which allows remote attackers to conduct SQL injection attacks via a \ (backslash) in a message. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4422.

Affected products

• Debian Debian Linux: version 8.0 only
• Quassel-Irc Quassel: up to and including 0.12.1

Published 2015-05-14. Last modified 2026-06-17.