Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-43114

Опубликовано: 18 сент. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

needs-triage

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage
noble

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

ignored

only affects Windows
esm-apps/focal

ignored

only affects Windows
esm-apps/jammy

ignored

only affects Windows
esm-apps/noble

ignored

only affects Windows
esm-infra/bionic

ignored

only affects Windows
esm-infra/xenial

ignored

only affects Windows
focal

ignored

end of standard support, was needs-triage
jammy

ignored

only affects Windows
lunar

ignored

end of life, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

ignored

Windows only
esm-apps/focal

ignored

Windows only
esm-apps/jammy

ignored

Windows only
esm-apps/noble

ignored

Windows only
esm-apps/xenial

ignored

Windows only
focal

ignored

end of standard support, was needs-triage
jammy

ignored

Windows only
lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 16%
0.00051
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 2 лет назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 5.5
nvd
больше 2 лет назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 5.5
debian
больше 2 лет назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6 ...

CVSS3: 5.5
github
больше 2 лет назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 3
fstec
больше 2 лет назад

Уязвимость функции addApplicationFont{FromData] класса QFontDatabase кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 16%
0.00051
Низкий

5.5 Medium

CVSS3