QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Dec 23, 2013 |
| Freebsd | — | Upgrade qt4-xml | Dec 10, 2025 | May 5, 2014 |
| Gentoo Linux | — | Upgrade dev-qt/qtcore. | Oct 30, 2017 | Dec 23, 2013 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qtUpgrade qt-mysqlUpgrade qt-develUpgrade qt-odbcUpgrade qt-postgresqlUpgrade qt-x11 | Dec 4, 2019 | Dec 23, 2013 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qt-mysqlUpgrade qtUpgrade qt-odbcUpgrade qt-develUpgrade qt-postgresqlUpgrade qt-x11 | Dec 18, 2019 | Dec 23, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade libqt4-sql-unixODBCUpgrade libqt4-private-headers-develUpgrade libqt4-sql-mysqlUpgrade libqt4-x11-32bitUpgrade libqt4-x86Upgrade libqt5-sql-unixODBC-32bitUpgrade libqt4-sqlUpgrade libqt4Upgrade libqt4-sql-mysql-x86Upgrade libqt5-sql-unixODBCUpgrade libqt5-sql-sqlite-32bitUpgrade libQtWebKit4-32bitUpgrade libqt5-sql-postgresql-32bitUpgrade libqt4-sql-x86Upgrade libqt5test5Upgrade libqt4-sql-sqlite-x86Upgrade libqt4-devel-docUpgrade libqt4-sql-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-sql-postgresql-32bitUpgrade libQtWebKit4Upgrade libqt4-sql-postgresql-x86Upgrade libqt5-sql-sqliteUpgrade libQtWebKit-develUpgrade libqt4-devel-doc-dataUpgrade libqt5-qtbaseUpgrade libqt5-sql-mysqlUpgrade libqt5-qtbase-develUpgrade libqt5widgets5-32bitUpgrade libqt5gui5Upgrade qt4-x11-toolsUpgrade libqt4-develUpgrade libqt4-sql-unixODBC-x86Upgrade libqt4-sql-mysql-32bitUpgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-32bitUpgrade libQtWebKit4-x86Upgrade libqt5-sql-mysql-32bitUpgrade libqt4-x11-x86Upgrade libqt4-x11Upgrade libqt4-sql-sqliteUpgrade libqt5test5-32bitUpgrade libqt5sql5Upgrade libqt4-linguistUpgrade libqt4-sql-postgresqlUpgrade libqt4-qt3supportUpgrade libqt4-sql-pluginsUpgrade libqt4-sql-sqlite-32bitUpgrade libqt5sql5-32bitUpgrade libqt5gui5-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5widgets5Upgrade libqt4-qt3support-x86Upgrade libqt5-qtbase-32bitUpgrade libqt5-sql-postgresql | Jan 16, 2014 | Dec 23, 2013 |
| Ubuntu | — | Upgrade libqt4-xmlUpgrade libqt5xml5 | Nov 8, 2024 | Dec 23, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub