Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-43114

Опубликовано: 18 сент. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

DNE

jammy

DNE

lunar

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

lunar

ignored

end of life, was needs-triage
mantic

ignored

end of life, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

ignored

only affects Windows
esm-apps/focal

ignored

only affects Windows
esm-apps/jammy

ignored

only affects Windows
esm-apps/noble

ignored

only affects Windows
esm-apps/resolute

ignored

only affects Windows
esm-infra-legacy/xenial

ignored

only affects Windows
esm-infra/bionic

ignored

only affects Windows
esm-infra/xenial

ignored

end of ESM support, was ignored [only affects Windows]
focal

ignored

end of standard support, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

ignored

Windows only
esm-apps-legacy/xenial

ignored

Windows only
esm-apps/focal

ignored

Windows only
esm-apps/jammy

ignored

Windows only
esm-apps/noble

ignored

Windows only
esm-apps/resolute

ignored

Windows only
esm-apps/xenial

ignored

end of ESM support, was ignored [Windows only]
focal

ignored

end of standard support, was needs-triage
jammy

ignored

Windows only

Показывать по

EPSS

Процентиль: 16%
0.00249
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
почти 3 года назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 5.5
nvd
почти 3 года назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 5.5
debian
почти 3 года назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6 ...

CVSS3: 5.5
github
почти 3 года назад

An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks.

CVSS3: 3
fstec
почти 3 года назад

Уязвимость функции addApplicationFont{FromData] класса QFontDatabase кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 16%
0.00249
Низкий

5.5 Medium

CVSS3