CVE-2017-15011

Опубликовано: 04 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.

Ссылки

https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf
Third Party Advisory
https://www.youtube.com/watch?v=m6zISgWPGGY
Third Party Advisory
https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf
Third Party Advisory
https://www.youtube.com/watch?v=m6zISgWPGGY
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.01399

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-15011

CVSS3: 7.5

ubuntu

около 9 лет назад

CVE-2017-15011

CVSS3: 7.5

debian

около 9 лет назад

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and S ...

GHSA-qf2h-9679-5x7v

CVSS3: 7.5

github

больше 4 лет назад

ALT-PU-2016-1676

CVSS3: 7.5

altlinux

больше 10 лет назад

ALT-PU-2016-1676: package `qt5-webengine` update to version 5.6.1-alt1

ALT-PU-2016-1675

CVSS3: 7.5

altlinux

больше 10 лет назад

ALT-PU-2016-1675: package `qt5-wayland` update to version 5.6.1-alt1

EPSS

Процентиль: 73%

0.01399

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119