PT-2023-2558 · Qt Company+5 · Qt+5
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Qt versions 5.x through 5.15.12
Qt versions 6.x through 6.2.7
Qt versions 6.3.x through 6.4.2
Description
The issue is related to the incorrect cleanup or release of resources in the SQL ODBC plugin of the Qt framework. This can be exploited by a remote attacker to cause a denial of service using specially crafted data. The vulnerability is triggered when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4.
Recommendations
For Qt versions 5.x through 5.15.12, update to version 5.15.13 or later.
For Qt versions 6.x through 6.2.7, update to version 6.2.8 or later.
For Qt versions 6.3.x through 6.4.2, update to version 6.4.3 or later.
Exploit
Fix
Improper Resource Release
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Qt
Suse
Ubuntu