Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-24607
HistoryApr 15, 2023 - 12:00 a.m.

CVE-2023-24607

2023-04-1500:00:00
ubuntu.com
ubuntu.com
18
qt
denial of service
sql odbc
driver plugin
crafted string
size
vulnerability
5.x
6.x
6.2.8
6.3.x
6.4.3
unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

54.7%

Qt before 6.4.3 allows a denial of service via a crafted string when the
SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected
versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

54.7%