CVE-2018-19865

Опубликовано: 05 дек. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

Ссылки

http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
Release Notes
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.html
Mailing List
Third Party Advisory
https://codereview.qt-project.org/#/c/243666/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244569/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244687/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244845/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/245283/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/245293/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/245312/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/245638/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/245640/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/246630/
Patch
Vendor Advisory
http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
Release Notes
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.html
Mailing List
Third Party Advisory
https://codereview.qt-project.org/#/c/243666/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244569/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244687/
Patch
Vendor Advisory
https://codereview.qt-project.org/#/c/244845/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

Версия от 5.7.0 (включая) до 5.7.1 (включая)

cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

Версия от 5.9.0 (включая) до 5.9.7 (включая)

cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

Версия от 5.10.0 (включая) до 5.10.1 (включая)

cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

Версия от 5.11.0 (включая) до 5.11.3 (исключая)

cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00784

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-532

Связанные уязвимости

CVE-2018-19865

CVSS3: 7.5

ubuntu

около 7 лет назад

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

CVE-2018-19865

CVSS3: 7.5

debian

около 7 лет назад

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7 ...

openSUSE-SU-2019:1259-1

suse-cvrf

почти 7 лет назад

Security update for libqt5-qtvirtualkeyboard

GHSA-f68g-4p63-5wh7

CVSS3: 7.5

github

больше 3 лет назад

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

EPSS

Процентиль: 73%

0.00784

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-532