Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qttools-staticUpgrade qt5-qtbase-static | May 4, 2022 | Sep 14, 2020 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-examplesUpgrade qt5-qtbase-docUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-develUpgrade qt5-qtbaseUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-guiUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-common | Oct 28, 2020 | Sep 14, 2020 |
| Centos_linux | — | Upgrade qt5-qttools-debugsourceUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-qtbase-staticUpgrade qt5-qttools-libs-help-debuginfoUpgrade qt5-qtbase-develUpgrade qt5-qttoolsUpgrade qt5-qdbusviewer-debuginfoUpgrade qt5-qtbase-examplesUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-docUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qttools-tests-debuginfoUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-assistant-debuginfoUpgrade qt5-qtbase-guiUpgrade qt5-rpm-macrosUpgrade qt5-linguistUpgrade qt5-assistantUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-mysqlUpgrade qt5-qtwebsockets-tests-debuginfoUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qttools-libs-designer-debuginfoUpgrade qt5-qdbusviewerUpgrade qt5-doctoolsUpgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-linguist-debuginfoUpgrade qt5-qttools-commonUpgrade qt5-qtbaseUpgrade qt5-qttools-develUpgrade qt5-qtbase-private-develUpgrade qt5-qtwebsocketsUpgrade qt5-qttools-libs-designerUpgrade qt5-qttools-libs-designercomponents-debuginfoUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qttools-devel-debuginfoUpgrade qt5-qttools-debuginfoUpgrade qt5-qttools-examplesUpgrade qt5-qtbase-commonUpgrade qt5-designer-debuginfoUpgrade qt5-qttools-examples-debuginfoUpgrade qt5-doctools-debuginfoUpgrade qt5-qtwebsockets-develUpgrade qt5-qtbase-debugsourceUpgrade qt5-designerUpgrade qt5-qtbase-devel-debuginfoUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qttools-libs-help | Oct 1, 2020 | Sep 14, 2020 |
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Sep 14, 2020 |
| Gentoo Linux | — | Upgrade dev-qt/qtcore. | Mar 27, 2020 | Mar 26, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qt-postgresqlUpgrade qt-odbcUpgrade qt-x11Upgrade qtUpgrade qt-develUpgrade qt-mysql | Nov 3, 2020 | Sep 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qtUpgrade qt-mysqlUpgrade qt-x11Upgrade qt-commonUpgrade qt-develUpgrade qt-odbc | Nov 3, 2020 | Sep 14, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/qt5 to version 5.12.7-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Sep 14, 2020 |
| Oracle_linux | — | Upgrade qt5-qtbaseUpgrade qt5-qttools-staticUpgrade qt5-doctoolsUpgrade qt5-qtbase-examplesUpgrade qt5-linguistUpgrade qt5-qdbusviewerUpgrade qt5-qtbase-develUpgrade qt5-rpm-macrosUpgrade qt5-qttoolsUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-mysqlUpgrade qt5-qttools-commonUpgrade qt5-qtwebsockets-develUpgrade qt5-designerUpgrade qt5-qtbase-docUpgrade qt5-qtbase-staticUpgrade qt5-qttools-libs-designerUpgrade qt5-qttools-develUpgrade qt5-qttools-examplesUpgrade qt5-qtbase-guiUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qtbase-commonUpgrade qt5-qttools-libs-helpUpgrade qt5-qtwebsocketsUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qtbase-postgresqlUpgrade qt5-assistantUpgrade qt5-qtbase-private-devel | Oct 7, 2020 | Feb 7, 2020 |
| Redhat_linux | — | Upgrade qt5-qtwebsockets-examplesUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-designerUpgrade qt5-qttools-libs-designer-debuginfoUpgrade qt5-qttools-examples-debuginfoUpgrade qt5-qttools-develUpgrade qt5-qtwebsockets-develUpgrade qt5-qttools-libs-helpUpgrade qt5-qttools-libs-help-debuginfoUpgrade qt5-qtbase-devel-debuginfoUpgrade qt5-qttools-commonUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtwebsocketsUpgrade qt5-qttools-examplesUpgrade qt5-qttools-libs-designerUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-assistantUpgrade qt5-qtbase-odbcUpgrade qt5-linguist-debuginfoUpgrade qt5-qttools-debuginfoNo solution existsUpgrade qt5-qttools-libs-designercomponents-debuginfoUpgrade qt5-qttools-devel-debuginfoUpgrade qt5-qtbase-commonUpgrade qt5-qttools-debugsourceUpgrade qt5-qtbase-private-develUpgrade qt5-doctools-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-mysqlUpgrade qt5-assistant-debuginfoUpgrade qt5-qtbaseUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-develUpgrade qt5-qtwebsockets-tests-debuginfoUpgrade qt5-qttools-tests-debuginfoUpgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qttoolsUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtbase-examplesUpgrade qt5-designer-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt5-linguistUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-qdbusviewer-debuginfoUpgrade qt5-qtbase-docUpgrade qt5-qtbase-staticUpgrade qt5-qdbusviewerUpgrade qt5-doctoolsUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qttools-staticUpgrade qt5-qtbase-tests-debuginfo | Oct 1, 2020 | Sep 14, 2020 |
| Rocky_linux | — | Upgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-qtwebsocketsUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-qtwebsockets-devel | Mar 12, 2024 | Sep 14, 2020 |
| Suse | — | Upgrade libqt5sql-private-headers-develUpgrade libqt5dbus-private-headers-develUpgrade libqt5dbus5Upgrade libqt5platformsupport-devel-staticUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5openglextensions-devel-staticUpgrade libqt5network-develUpgrade libqt5sql5-mysqlUpgrade libqt5test5Upgrade libqt5opengl-develUpgrade libqt5gui-private-headers-develUpgrade libqt5-qtbase-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5dbus-develUpgrade libqt5printsupport-develUpgrade libqt5sql-develUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5concurrent5Upgrade libqt5widgets5Upgrade libqt5test-private-headers-develUpgrade libqt5xml-develUpgrade libqt5core-private-headers-develUpgrade libqt5kmssupport-private-headers-develUpgrade libqt5concurrent-develUpgrade libqt5network5Upgrade libqt5sql5-postgresqlUpgrade libqt5sql5-unixodbcUpgrade libqt5kmssupport-devel-staticUpgrade libqt5sql5Upgrade libqt5widgets-private-headers-develUpgrade libqt5platformheaders-develUpgrade libqt5opengl-private-headers-develUpgrade libqt5gui-develUpgrade libqt5network-private-headers-develUpgrade libqt5widgets-develUpgrade libqt5core5Upgrade libqt5core-develUpgrade libqt5printsupport-private-headers-develUpgrade libqt5xml5Upgrade libqt5-qtbase-common-develUpgrade libqt5test-develUpgrade libqt5gui5Upgrade libqt5printsupport5Upgrade libqt5sql5-sqliteUpgrade libqt5opengl5 | Feb 4, 2022 | Feb 10, 2020 |
| Ubuntu | — | Upgrade libqt5core5aUpgrade libqt5gui5 | Feb 11, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub