PT-2017-7316 · Qt+2 · Qt5-Qtwebkit+2

Vasyl Kaigorodov · Publicado 2014-12-18 · Atualizado 2021-08-31 · CVE-2015-8079

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions qt5-qtwebkit versions prior to 5.4

Description The issue concerns the recording of private browsing URLs in the favicon database, WebpageIcons.db. This affects the privacy of users' browsing history.

Recommendations For qt5-qtwebkit versions prior to 5.4, consider clearing the WebpageIcons.db database to remove recorded private browsing URLs. As a temporary workaround, restrict access to the favicon database to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2014-2467

CVE-2015-8079

SUSE-SU-2016:2397-1

SUSE-SU-2016_2397-1

Produtos afetados

Alt Linux

Suse

Qt5-Qtwebkit

Referências · 22

• https://osv.dev/vulnerability/SUSE-SU-2016:2397-1 · Aviso do Fabricante
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8079 · Nota de Segurança
• http://trac.webkit.org/changeset/181565 · Nota
• https://suse.com/security/cve/CVE-2016-6354 · Nota
• https://errata.altlinux.org/ALT-PU-2014-2467 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2015-8079 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2016-September/002293.html · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2015-8079 · Nota
• http://openwall.com/lists/oss-security/2015/11/05/4 · Nota
• https://suse.com/security/cve/CVE-2015-8079 · Nota
• https://suse.com/security/cve/CVE-2015-8079.html · Nota
• https://codereview.qt-project.org/#/c/108936 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2016/suse-su-20162397-1 · Nota
• https://suse.com/security/cve/CVE-2016-6354.html · Nota