PT-2023-2558 · Qt Company+5 · Qt+5
Andy Shaw
·
Publicado
2023-02-20
·
Atualizado
2025-09-28
·
CVE-2023-24607
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Qt versions 5.x through 5.15.12
Qt versions 6.x through 6.2.7
Qt versions 6.3.x through 6.4.2
Description
The issue is related to the incorrect cleanup or release of resources in the SQL ODBC plugin of the Qt framework. This can be exploited by a remote attacker to cause a denial of service using specially crafted data. The vulnerability is triggered when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4.
Recommendations
For Qt versions 5.x through 5.15.12, update to version 5.15.13 or later.
For Qt versions 6.x through 6.2.7, update to version 6.2.8 or later.
For Qt versions 6.3.x through 6.4.2, update to version 6.4.3 or later.
Correção
RCE
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Qt
Suse
Ubuntu