PT-2018-15133 · Qt Company+2 · Qt+2

Publicado 2018-12-05 · Atualizado 2019-05-10 · CVE-2018-19865

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qt versions 5.7.x through 5.11.2

Description A keystroke logging issue was discovered in Virtual Keyboard in Qt.

Recommendations For Qt versions 5.7.x through 5.10.x, update to version 5.11.3 or later. For Qt version 5.11.x before 5.11.3, update to version 5.11.3 or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

ALT-PU-2018-2887

ALT-PU-2018-2888

ALT-PU-2018-2889

ALT-PU-2018-2890

ALT-PU-2018-2891

ALT-PU-2018-2892

ALT-PU-2018-2893

ALT-PU-2018-2894

ALT-PU-2018-2895

ALT-PU-2018-2896

ALT-PU-2018-2897

ALT-PU-2018-2898

ALT-PU-2018-2899

ALT-PU-2018-2900

ALT-PU-2018-2901

ALT-PU-2018-2902

ALT-PU-2018-2903

ALT-PU-2018-2904

ALT-PU-2018-2905

ALT-PU-2018-2906

ALT-PU-2018-2907

ALT-PU-2018-2908

ALT-PU-2018-2909

ALT-PU-2018-2910

ALT-PU-2018-2911

ALT-PU-2018-2912

ALT-PU-2018-2913

ALT-PU-2018-2914

ALT-PU-2018-2915

ALT-PU-2018-2916

ALT-PU-2018-2917

CVE-2018-19865

OPENSUSE-SU-2019:1259-1

OPENSUSE-SU-2019:1263-1

OPENSUSE-SU-2019_1259-1

Produtos afetados

Alt Linux

Qt

Suse

Referências · 71

• https://bdu.fstec.ru/vul/2021-03457 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2018-2915 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/6PXA6IRQZYJ3IJQU6BLS7V5KLPYC6MSI/#6PXA6IRQZYJ3IJQU6BLS7V5KLPYC6MSI · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15518 · Nota de Segurança
• https://codereview.qt-project.org/#/c/245312 · Aviso do Fabricante
• https://codereview.qt-project.org/#/c/245283 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19865 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19865 · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2019:1263-1 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2018-2906 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/6PXA6IRQZYJ3IJQU6BLS7V5KLPYC6MSI · Nota
• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00922 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2018-2891 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19865 · Nota de Segurança