Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15011

Опубликовано: 04 окт. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*
cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00578
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu логотип

CVE-2017-15011

CVSS3: 7.5
ubuntu
больше 8 лет назад

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.

debian логотип

CVE-2017-15011

CVSS3: 7.5
debian
больше 8 лет назад

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and S ...

github логотип

GHSA-qf2h-9679-5x7v

CVSS3: 7.5
github
больше 3 лет назад

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.

EPSS

Процентиль: 68%
0.00578
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119