PT-2018-15133 · Qt Company+2 · Qt+2

Published 2018-12-05 · Updated 2019-05-10 · CVE-2018-19865

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qt versions 5.7.x through 5.11.2

Description A keystroke logging issue was discovered in Virtual Keyboard in Qt.

Recommendations For Qt versions 5.7.x through 5.10.x, update to version 5.11.3 or later. For Qt version 5.11.x before 5.11.3, update to version 5.11.3 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

ALT-PU-2018-2887

ALT-PU-2018-2888

ALT-PU-2018-2889

ALT-PU-2018-2890

ALT-PU-2018-2891

ALT-PU-2018-2892

ALT-PU-2018-2893

ALT-PU-2018-2894

ALT-PU-2018-2895

ALT-PU-2018-2896

ALT-PU-2018-2897

ALT-PU-2018-2898

ALT-PU-2018-2899

ALT-PU-2018-2900

ALT-PU-2018-2901

ALT-PU-2018-2902

ALT-PU-2018-2903

ALT-PU-2018-2904

ALT-PU-2018-2905

ALT-PU-2018-2906

ALT-PU-2018-2907

ALT-PU-2018-2908

ALT-PU-2018-2909

ALT-PU-2018-2910

ALT-PU-2018-2911

ALT-PU-2018-2912

ALT-PU-2018-2913

ALT-PU-2018-2914

ALT-PU-2018-2915

ALT-PU-2018-2916

ALT-PU-2018-2917

CVE-2018-19865

OPENSUSE-SU-2019:1259-1

OPENSUSE-SU-2019:1263-1

OPENSUSE-SU-2019_1259-1

Affected Products

Alt Linux

Qt

Suse

References · 71

• https://bdu.fstec.ru/vul/2021-03457 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-2915 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15518 · Security Note
• https://codereview.qt-project.org/#/c/245312 · Vendor Advisory
• https://codereview.qt-project.org/#/c/245283 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19865 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19865 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:1263-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-2906 · Vendor Advisory
• http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00922 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-2891 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19865 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:1259-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19870 · Security Note