The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qt-odbcUpgrade qt-develUpgrade phonon-backend-gstreamerUpgrade qt-x11Upgrade qt-docUpgrade qt-mysqlUpgrade qt-sqliteUpgrade qt-postgresqlUpgrade qtUpgrade qt-examplesUpgrade qt-demos | Dec 1, 2016 | Feb 6, 2013 |
| Gentoo Linux | — | Upgrade dev-qt/qtcore.Upgrade dev-qt/qtgui. | Oct 30, 2017 | Feb 6, 2013 |
| Oracle_linux | — | Upgrade phonon-backend-gstreamerUpgrade qt-develUpgrade qt-sqliteUpgrade qt-demosUpgrade qt-mysqlUpgrade qtUpgrade qt-x11Upgrade qt-odbcUpgrade qt-docUpgrade qt-postgresqlUpgrade qt-examples | Oct 16, 2024 | Feb 6, 2013 |
| Suse | — | Upgrade libQtWebKit4-32bitUpgrade libqt4-devel-doc-dataUpgrade sle-sdk-releaseUpgrade libqt4-sql-32bitUpgrade libqt4-x86Upgrade libqt4-sql-sqlite-debuginfo-32bitUpgrade libqt4-x11Upgrade libqt4-sql-debuginfoUpgrade libqt4Upgrade libqt4-sql-sqlite-32bitUpgrade libqt4-x11-debuginfo-x86Upgrade libqt4-sql-mysqlUpgrade libqt4-x11-debuginfoUpgrade libqt4-develUpgrade libQtWebKit-develUpgrade libqt4-devel-debuginfoUpgrade libqt4-32bitUpgrade libqt4-sql-sqliteUpgrade libqt4-sql-postgresqlUpgrade libqt4-debuginfoUpgrade libqt4-sqlUpgrade libqt4-private-headers-develUpgrade libqt4-sql-mysql-x86Upgrade qt4-x11-toolsUpgrade libqt4-debugsourceUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-devel-docUpgrade libqt4-sql-sqlite-x86Upgrade libqt4-sql-pluginsUpgrade libqt4-qt3support-x86Upgrade libQtWebKit4Upgrade libqt4-sql-sqlite-debuginfoUpgrade libQtWebKit4-x86Upgrade libqt4-x11-debuginfo-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-sqlite-debuginfo-x86Upgrade libqt4-qt3support-debuginfoUpgrade libqt4-sql-postgresql-32bitUpgrade libqt4-sql-unixODBCUpgrade libqt4-sql-debuginfo-32bitUpgrade libqt4-debuginfo-x86Upgrade libqt4-x11-32bitUpgrade libqt4-sql-x86Upgrade libqt4-x11-x86Upgrade libqt4-debuginfo-32bitUpgrade libqt4-sql-unixODBC-x86Upgrade libqt4-qt3support-debuginfo-32bitUpgrade libqt4-sql-debuginfo-x86Upgrade libqt4-qt3supportUpgrade libqt4-sql-postgresql-x86Upgrade libqt4-qt3support-debuginfo-x86 | Dec 12, 2013 | Feb 6, 2013 |
| Ubuntu | — | Upgrade libqt4-coreUpgrade libqt4-network | Nov 8, 2024 | Feb 6, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub