Lucene search
Gentoo FoundationMGASA-2021-0262HistoryJun 16, 2021 - 11:22 p.m.
Updated qt4 and qtsvg5 packages fix a security vulnerability
2021-06-1623:22:25
Gentoo Foundation
advisories.mageia.org
21
security vulnerability
qt4
qtsvg5
information disclosure
crafted svg file
cve-2021-3481
unix
upstream fix
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS
0.001
Percentile
46.8%
An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includes the backported upstream fix and should resolve the security issue (CVE-2021-3481).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 7 | noarch | qt4 | < 4.8.7-26.3 | qt4-4.8.7-26.3.mga7 |
| Mageia | 7 | noarch | qtsvg5 | < 5.12.6-1.1 | qtsvg5-5.12.6-1.1.mga7 |
| Mageia | 8 | noarch | qt4 | < 4.8.7-35.1 | qt4-4.8.7-35.1.mga8 |
| Mageia | 8 | noarch | qtsvg5 | < 5.15.2-1.1 | qtsvg5-5.15.2-1.1.mga8 |
Related
nessus
nessus
AlmaLinux 8 : qt5 (ALSA-2021:4172)
2022-02-09 00:00:00
Rocky Linux 8 : qt5 (RLSA-2021:4172)
2023-11-06 00:00:00
CentOS 8 : qt5 (CESA-2021:4172)
2021-11-11 00:00:00
osv
osv
CVE-2021-3481
2022-08-22 15:15:13
Moderate: qt5 security, bug fix, and enhancement update
2021-11-09 08:31:20
Moderate: qt5 security, bug fix, and enhancement update
2021-11-09 08:31:20
ubuntucve
ubuntucve
CVE-2021-3481
2021-04-03 00:00:00
redhatcve
redhatcve
CVE-2021-3481
2021-04-01 11:38:51
redhat
redhat
(RHSA-2021:4172) Moderate: qt5 security, bug fix, and enhancement update
2021-11-09 08:31:20
(RHSA-2021:5127) Moderate: Openshift Logging security and bug update (5.2.4)
2021-12-14 16:45:56
(RHSA-2021:5129) Moderate: Openshift Logging security and bug update (5.3.1)
2021-12-14 16:46:20
nvd
nvd
CVE-2021-3481
2022-08-22 15:15:13
prion
prion
Design/Logic Flaw
2022-08-22 15:15:00
openvas
openvas
openSUSE: Security Advisory for libqt5-qtsvg (openSUSE-SU-2021:1371-1)
2021-10-19 00:00:00
openSUSE: Security Advisory for libqt5-qtsvg (openSUSE-SU-2021:3354-1)
2021-10-13 00:00:00
Mageia: Security Advisory (MGASA-2021-0262)
2022-01-28 00:00:00
suse
suse
Security update for libqt5-qtsvg (moderate)
2021-10-18 00:00:00
Security update for libqt5-qtsvg (moderate)
2021-10-12 00:00:00
almalinux
almalinux
Moderate: qt5 security, bug fix, and enhancement update
2021-11-09 08:31:20
cvelist
cvelist
CVE-2021-3481
2022-08-22 00:00:00
cve
cve
CVE-2021-3481
2022-08-22 15:15:13
rocky
rocky
qt5 security, bug fix, and enhancement update
2021-11-09 08:31:20
debiancve
debiancve
CVE-2021-3481
2022-08-22 15:15:13
veracode
veracode
Denial Of Service (DoS)
2021-11-28 00:40:38
amazon
amazon
Medium: qt5-qtsvg
2023-08-31 22:30:00
debian
debian
[SECURITY] [DLA 2885-1] qtsvg-opensource-src security update
2022-01-23 20:47:44
[SECURITY] [DLA 2895-1] qt4-x11 security update
2022-01-24 17:33:30
[SECURITY] [DLA 3539-1] qt4-x11 security update
2023-08-22 22:40:50
ubuntu
ubuntu
QtSvg vulnerabilities
2022-01-19 00:00:00
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS
0.001
Percentile
46.8%
Related for MGASA-2021-0262