Lucene search

MitreCVE-2018-19865

HistoryDec 05, 2018 - 11:29 a.m.

CVE-2018-19865

2018-12-0511:29:06

CWE-532

mitre

web.nvd.nist.gov

103

cve

2018

19865

keystroke logging

virtual keyboard

qt 5.x

security issue

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

71.9%

JSON

A keystroke logging issue was discovered in Virtual Keyboard in Qt 5.7.x, 5.8.x, 5.9.x, 5.10.x, and 5.11.x before 5.11.3.

Affected configurations

Nvd

Node

qtqtRange5.7.0–5.7.1

qtqtRange5.9.0–5.9.7

qtqtRange5.10.0–5.10.1

qtqtRange5.11.0–5.11.3

qtqtMatch5.8.0

Node

opensuseleapMatch15.0

VendorProductVersionCPE
qtqt5.8.0cpe:/a:qt:qt:5.8.0:::
qtqtcpe:/a:qt:qt::::

Vendor	Product	Version	CPE
qt	qt	5.8.0	cpe:/a:qt:qt:5.8.0:::
qt	qt		cpe:/a:qt:qt::::

References

blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

lists.opensuse.org/opensuse-security-announce/2019-04/msg00085.html

lists.opensuse.org/opensuse-security-announce/2019-04/msg00086.html

codereview.qt-project.org/#/c/243666/

codereview.qt-project.org/#/c/244569/

codereview.qt-project.org/#/c/244687/

codereview.qt-project.org/#/c/244845/

codereview.qt-project.org/#/c/245283/

codereview.qt-project.org/#/c/245293/

codereview.qt-project.org/#/c/245312/

codereview.qt-project.org/#/c/245638/

codereview.qt-project.org/#/c/245640/

codereview.qt-project.org/#/c/246630/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.004

Percentile

71.9%

JSON

Related for CVE-2018-19865