CVE-2023-24607

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan pada qt. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Rincian

Terbit di NVD

15 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff advisory vendor
• https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d patch · advisory pihak ketiga
• https://codereview.qt-project.org/c/qt/qtbase/+/456216 issue tracking
• https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217 permissions required
• https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238 permissions required
• https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
• https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin product
• https://www.qt.io/blog/tag/security release notes