This update for libqt5-qtbase fixes the following issues :

Security issues fixed :

CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)

CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libqt5-qtbase fixes the following issues :

Security issues fixed :

  - CVE-2018-15518: Fixed double free in QXmlStreamReader     (bsc#1118595)

  - CVE-2018-19873: Fixed Denial of Service on malformed BMP     file in QBmpHandler (bsc#1118596)

This update was imported from the SUSE:SLE-12-SP3:Update update project.

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Qt before 5.11.3. A     malformed GIF image causes a NULL pointer dereference     in QGifHandler resulting in a segmentation     fault.(CVE-2018-19870)

  - An issue was discovered in Qt before 5.11.3.
    QBmpHandler has a buffer overflow via BMP     data.(CVE-2018-19873)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1172 advisory.

    The qt packages contain a software toolkit that simplifies the task of writing and maintaining Graphical     User Interface (GUI) applications for the X Window System.

    Security Fix(es):

    * qt5-qtbase: Double free in QXmlStreamReader (CVE-2018-15518)

    * qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872)

    * qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869)

    * qt5-qtbase: QImage allocation failure in qgifhandler (CVE-2018-19870)

    * qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)

    * qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file (CVE-2018-19873)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for libqt4 fixes the following issues :

CVE-2018-15518: Fixed a double free in QXmlStreamReader (bsc#1118595)

CVE-2018-19873: Fixed a segmantation fault via a malformed BMP file (bsc#1118596).

CVE-2018-19869: Fixed an improper checking which might lead to a crach via a malformed url reference (bsc#1118599).

Added stricter toplevel asm parsing by dropping volatile qualification that has no effect (bsc#1121214).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libqt4 fixes the following issues :

  - Fix buffer over-read in read_xbm_body (boo#1176315,     CVE-2020-17507)

  - Fix 'double free or corruption' in QXmlStreamReader     (boo#1118595, CVE-2018-15518)

  - Fix QBmpHandler segfault on malformed BMP file     boo#1118596, CVE-2018-19873)

  - Fix crash when parsing malformed url reference     (boo#1118599, CVE-2018-19869)

This update for libqt4 fixes the following issues :

  - Fix buffer over-read in read_xbm_body (boo#1176315,     CVE-2020-17507)

  - Fix 'double free or corruption' in QXmlStreamReader     (boo#1118595, CVE-2018-15518)

  - Fix QBmpHandler segfault on malformed BMP file     boo#1118596, CVE-2018-19873)

  - Fix crash when parsing malformed url reference     (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtserialport packages installed that are affected by multiple vulnerabilities:

  - QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted     illegal XML document. (CVE-2018-15518)

  - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in     qsvghandler.cpp. (CVE-2018-19869)

  - An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in     QGifHandler resulting in a segmentation fault. (CVE-2018-19870)

  - An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
    (CVE-2018-19871)

  - An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
    (CVE-2018-19873)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has qt5-qtx11extras packages installed that are affected by multiple vulnerabilities:

  - QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted     illegal XML document. (CVE-2018-15518)

  - An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in     qsvghandler.cpp. (CVE-2018-19869)

  - An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in     QGifHandler resulting in a segmentation fault. (CVE-2018-19870)

  - An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
    (CVE-2018-19871)

  - An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
    (CVE-2018-19873)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
119762	SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2018:4183-1)	Nessus	SuSE Local Security Checks	2018/12/19	2024/7/15	critical
119825	SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2018:4210-1)	Nessus	SuSE Local Security Checks	2018/12/21	2024/7/15	critical
119860	openSUSE Security Update : libqt5-qtbase (openSUSE-2018-1592)	Nessus	SuSE Local Security Checks	2018/12/24	2024/7/15	critical
123116	EulerOS 2.0 SP3 : qt (EulerOS-SA-2019-1103)	Nessus	Huawei Local Security Checks	2019/3/26	2024/6/12	critical
135039	RHEL 7 : qt (RHSA-2020:1172)	Nessus	Red Hat Local Security Checks	2020/3/31	2024/11/7	critical
135753	SUSE SLES12 Security Update : libqt4 (SUSE-SU-2020:1021-1)	Nessus	SuSE Local Security Checks	2020/4/20	2024/3/15	critical
140682	openSUSE Security Update : libqt4 (openSUSE-2020-1452)	Nessus	SuSE Local Security Checks	2020/9/21	2024/2/20	critical
140743	openSUSE Security Update : libqt4 (openSUSE-2020-1501)	Nessus	SuSE Local Security Checks	2020/9/23	2024/2/20	critical
174084	NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtserialport Multiple Vulnerabilities (NS-SA-2023-0011)	Nessus	NewStart CGSL Local Security Checks	2023/4/11	2023/4/11	critical
174094	NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtx11extras Multiple Vulnerabilities (NS-SA-2023-0023)	Nessus	NewStart CGSL Local Security Checks	2023/4/11	2023/4/11	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical