Описание
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qtbase-opensource-src | fixed | 5.11.3+dfsg-1 | experimental | package |
| qtbase-opensource-src | fixed | 5.11.3+dfsg-2 | package | |
| qt4-x11 | fixed | 4:4.8.7+dfsg-18 | package |
Примечания
https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
https://codereview.qt-project.org/#/c/238749/
https://github.com/qt/qtbase/commit/621ab8ab59901cc3f9bd98be709929c9eac997a8
EPSS
Связанные уязвимости
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
Уязвимость класса QBmpHandler кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании или получить несанкционированный доступ к информации
EPSS