Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-32763HistoryMay 28, 2023 - 11:15 p.m.
CVE-2023-32763
2023-05-2823:15:09
Debian Security Bug Tracker
security-tracker.debian.org
41
cve-2023-32763
qt
svg
qtextlayout
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
44.0%
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | qt6-base | < 6.4.2+dfsg-8 | qt6-base_6.4.2+dfsg-8_all.deb |
| Debian | 999 | all | qt6-base | < 6.4.2+dfsg-8 | qt6-base_6.4.2+dfsg-8_all.deb |
| Debian | 13 | all | qt6-base | < 6.4.2+dfsg-8 | qt6-base_6.4.2+dfsg-8_all.deb |
| Debian | 12 | all | qtbase-opensource-src | < 5.15.8+dfsg-10 | qtbase-opensource-src_5.15.8+dfsg-10_all.deb |
| Debian | 11 | all | qtbase-opensource-src | < 5.15.2+dfsg-9+deb11u1 | qtbase-opensource-src_5.15.2+dfsg-9+deb11u1_all.deb |
| Debian | 999 | all | qtbase-opensource-src | < 5.15.8+dfsg-10 | qtbase-opensource-src_5.15.8+dfsg-10_all.deb |
| Debian | 13 | all | qtbase-opensource-src | < 5.15.8+dfsg-10 | qtbase-opensource-src_5.15.8+dfsg-10_all.deb |
| Debian | 12 | all | qtbase-opensource-src-gles | < 5.15.8+dfsg-3 | qtbase-opensource-src-gles_5.15.8+dfsg-3_all.deb |
| Debian | 11 | all | qtbase-opensource-src-gles | <= 5.15.2+dfsg-4 | qtbase-opensource-src-gles_5.15.2+dfsg-4_all.deb |
| Debian | 999 | all | qtbase-opensource-src-gles | < 5.15.8+dfsg-3 | qtbase-opensource-src-gles_5.15.8+dfsg-3_all.deb |
Related
nessus
nessus
SUSE SLES15 Security Update : libqt5-qtbase (SUSE-SU-2023:2860-1)
2023-07-18 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : qt6-base (SUSE-SU-2023:2780-1)
2023-07-05 00:00:00
Amazon Linux 2 : qt5-qtbase (ALAS-2023-2159)
2023-07-26 00:00:00
nvd
nvd
CVE-2023-32763
2023-05-28 23:15:09
cve
cve
CVE-2023-32763
2023-05-28 23:15:09
veracode
veracode
Denial Of Services (DoS)
2023-06-04 19:34:12
prion
prion
Buffer overflow
2023-05-28 23:15:00
cbl_mariner
cbl_mariner
CVE-2023-32763 affecting package qt5-qtsvg for versions less than 1.20.11-1
2024-02-09 08:28:40
CVE-2023-32763 affecting package qt5-qtbase for versions less than 5.12.11-8
2023-05-25 09:38:10
CVE-2023-32763 affecting package qt5-qtbase 5.12.11-5
2023-06-27 21:25:25
ubuntucve
ubuntucve
CVE-2023-32763
2023-05-28 00:00:00
cvelist
cvelist
CVE-2023-32763
2023-05-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:2860-1)
2023-07-18 00:00:00
Mageia: Security Advisory (MGASA-2023-0190)
2023-06-01 00:00:00
Fedora: Security Advisory for qt5-qtbase (FEDORA-2023-b9ead419b6)
2023-05-19 00:00:00
alpinelinux
alpinelinux
CVE-2023-32763
2023-05-28 23:15:09
osv
osv
CVE-2023-32763
2023-05-28 23:15:09
qtbase-opensource-src - security update
2024-05-01 00:00:00
qt4-x11 - security update
2023-08-22 00:00:00
amazon
amazon
Medium: qt5-qtbase
2023-07-20 17:29:00
gentoo
gentoo
QtGui: Multiple Vulnerabilities
2024-02-03 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: qt5-qtbase-5.15.9-3.fc37
2023-05-24 01:15:12
[SECURITY] Fedora 38 Update: qt5-qtbase-5.15.9-3.fc38
2023-05-18 01:59:19
mageia
mageia
Updated qtbase5 packages fix security vulnerability
2023-05-31 09:41:32
debian
debian
[SECURITY] [DLA 3805-1] qtbase-opensource-src security update
2024-04-30 22:47:38
[SECURITY] [DLA 3539-1] qt4-x11 security update
2023-08-22 22:40:50
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
44.0%
Related for DEBIANCVE:CVE-2023-32763