Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-qt5-qtbase-staticalma-upgrade-qt5-qttools-static | May 4, 2022 | Sep 14, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-qt5-qtbaseamazon-linux-ami-2-upgrade-qt5-qtbase-commonamazon-linux-ami-2-upgrade-qt5-qtbase-debuginfoamazon-linux-ami-2-upgrade-qt5-qtbase-develamazon-linux-ami-2-upgrade-qt5-qtbase-docamazon-linux-ami-2-upgrade-qt5-qtbase-examplesamazon-linux-ami-2-upgrade-qt5-qtbase-guiamazon-linux-ami-2-upgrade-qt5-qtbase-mysqlamazon-linux-ami-2-upgrade-qt5-qtbase-odbcamazon-linux-ami-2-upgrade-qt5-qtbase-postgresqlamazon-linux-ami-2-upgrade-qt5-qtbase-staticamazon-linux-ami-2-upgrade-qt5-rpm-macros | Oct 28, 2020 | Sep 14, 2020 | |
| Centos_linux | — | centos-upgrade-qt5-assistantcentos-upgrade-qt5-assistant-debuginfocentos-upgrade-qt5-designercentos-upgrade-qt5-designer-debuginfocentos-upgrade-qt5-doctoolscentos-upgrade-qt5-doctools-debuginfocentos-upgrade-qt5-linguistcentos-upgrade-qt5-linguist-debuginfocentos-upgrade-qt5-qdbusviewercentos-upgrade-qt5-qdbusviewer-debuginfocentos-upgrade-qt5-qtbasecentos-upgrade-qt5-qtbase-commoncentos-upgrade-qt5-qtbase-debuginfocentos-upgrade-qt5-qtbase-debugsourcecentos-upgrade-qt5-qtbase-develcentos-upgrade-qt5-qtbase-devel-debuginfocentos-upgrade-qt5-qtbase-doccentos-upgrade-qt5-qtbase-examplescentos-upgrade-qt5-qtbase-examples-debuginfocentos-upgrade-qt5-qtbase-guicentos-upgrade-qt5-qtbase-gui-debuginfocentos-upgrade-qt5-qtbase-mysqlcentos-upgrade-qt5-qtbase-mysql-debuginfocentos-upgrade-qt5-qtbase-odbccentos-upgrade-qt5-qtbase-odbc-debuginfocentos-upgrade-qt5-qtbase-postgresqlcentos-upgrade-qt5-qtbase-postgresql-debuginfocentos-upgrade-qt5-qtbase-private-develcentos-upgrade-qt5-qtbase-staticcentos-upgrade-qt5-qtbase-tests-debuginfocentos-upgrade-qt5-qttoolscentos-upgrade-qt5-qttools-commoncentos-upgrade-qt5-qttools-debuginfocentos-upgrade-qt5-qttools-debugsourcecentos-upgrade-qt5-qttools-develcentos-upgrade-qt5-qttools-devel-debuginfocentos-upgrade-qt5-qttools-examplescentos-upgrade-qt5-qttools-examples-debuginfocentos-upgrade-qt5-qttools-libs-designercentos-upgrade-qt5-qttools-libs-designer-debuginfocentos-upgrade-qt5-qttools-libs-designercomponentscentos-upgrade-qt5-qttools-libs-designercomponents-debuginfocentos-upgrade-qt5-qttools-libs-helpcentos-upgrade-qt5-qttools-libs-help-debuginfocentos-upgrade-qt5-qttools-tests-debuginfocentos-upgrade-qt5-qtwebsocketscentos-upgrade-qt5-qtwebsockets-debuginfocentos-upgrade-qt5-qtwebsockets-debugsourcecentos-upgrade-qt5-qtwebsockets-develcentos-upgrade-qt5-qtwebsockets-devel-debuginfocentos-upgrade-qt5-qtwebsockets-examplescentos-upgrade-qt5-qtwebsockets-examples-debuginfocentos-upgrade-qt5-qtwebsockets-tests-debuginfocentos-upgrade-qt5-rpm-macros | Oct 1, 2020 | Sep 14, 2020 |
| Debian | debian-upgrade-qtbase-opensource-src | Jul 30, 2024 | Sep 14, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtcore | Mar 27, 2020 | Mar 26, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-qthuawei-euleros-2_0_sp2-upgrade-qt-develhuawei-euleros-2_0_sp2-upgrade-qt-mysqlhuawei-euleros-2_0_sp2-upgrade-qt-odbchuawei-euleros-2_0_sp2-upgrade-qt-postgresqlhuawei-euleros-2_0_sp2-upgrade-qt-x11 | Nov 3, 2020 | Sep 14, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-qthuawei-euleros-2_0_sp8-upgrade-qt-commonhuawei-euleros-2_0_sp8-upgrade-qt-develhuawei-euleros-2_0_sp8-upgrade-qt-mysqlhuawei-euleros-2_0_sp8-upgrade-qt-odbchuawei-euleros-2_0_sp8-upgrade-qt-x11 | Nov 3, 2020 | Sep 14, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-desktop-qt5-5-12-7-11-4-21-0-1-69-0 | Jan 19, 2021 | Sep 14, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-qt5-assistantoracle-linux-upgrade-qt5-designeroracle-linux-upgrade-qt5-doctoolsoracle-linux-upgrade-qt5-linguistoracle-linux-upgrade-qt5-qdbusvieweroracle-linux-upgrade-qt5-qtbaseoracle-linux-upgrade-qt5-qtbase-commonoracle-linux-upgrade-qt5-qtbase-develoracle-linux-upgrade-qt5-qtbase-docoracle-linux-upgrade-qt5-qtbase-examplesoracle-linux-upgrade-qt5-qtbase-guioracle-linux-upgrade-qt5-qtbase-mysqloracle-linux-upgrade-qt5-qtbase-odbcoracle-linux-upgrade-qt5-qtbase-postgresqloracle-linux-upgrade-qt5-qtbase-private-develoracle-linux-upgrade-qt5-qtbase-staticoracle-linux-upgrade-qt5-qttoolsoracle-linux-upgrade-qt5-qttools-commonoracle-linux-upgrade-qt5-qttools-develoracle-linux-upgrade-qt5-qttools-examplesoracle-linux-upgrade-qt5-qttools-libs-designeroracle-linux-upgrade-qt5-qttools-libs-designercomponentsoracle-linux-upgrade-qt5-qttools-libs-helporacle-linux-upgrade-qt5-qttools-staticoracle-linux-upgrade-qt5-qtwebsocketsoracle-linux-upgrade-qt5-qtwebsockets-develoracle-linux-upgrade-qt5-qtwebsockets-examplesoracle-linux-upgrade-qt5-rpm-macros | Oct 7, 2020 | Feb 7, 2020 |
| Redhat_linux | redhat-upgrade-qt5-assistantredhat-upgrade-qt5-assistant-debuginforedhat-upgrade-qt5-designerredhat-upgrade-qt5-designer-debuginforedhat-upgrade-qt5-doctoolsredhat-upgrade-qt5-doctools-debuginforedhat-upgrade-qt5-linguistredhat-upgrade-qt5-linguist-debuginforedhat-upgrade-qt5-qdbusviewerredhat-upgrade-qt5-qdbusviewer-debuginforedhat-upgrade-qt5-qtbaseredhat-upgrade-qt5-qtbase-commonredhat-upgrade-qt5-qtbase-debuginforedhat-upgrade-qt5-qtbase-debugsourceredhat-upgrade-qt5-qtbase-develredhat-upgrade-qt5-qtbase-devel-debuginforedhat-upgrade-qt5-qtbase-docredhat-upgrade-qt5-qtbase-examplesredhat-upgrade-qt5-qtbase-examples-debuginforedhat-upgrade-qt5-qtbase-guiredhat-upgrade-qt5-qtbase-gui-debuginforedhat-upgrade-qt5-qtbase-mysqlredhat-upgrade-qt5-qtbase-mysql-debuginforedhat-upgrade-qt5-qtbase-odbcredhat-upgrade-qt5-qtbase-odbc-debuginforedhat-upgrade-qt5-qtbase-postgresqlredhat-upgrade-qt5-qtbase-postgresql-debuginforedhat-upgrade-qt5-qtbase-private-develredhat-upgrade-qt5-qtbase-staticredhat-upgrade-qt5-qtbase-tests-debuginforedhat-upgrade-qt5-qttoolsredhat-upgrade-qt5-qttools-commonredhat-upgrade-qt5-qttools-debuginforedhat-upgrade-qt5-qttools-debugsourceredhat-upgrade-qt5-qttools-develredhat-upgrade-qt5-qttools-devel-debuginforedhat-upgrade-qt5-qttools-examplesredhat-upgrade-qt5-qttools-examples-debuginforedhat-upgrade-qt5-qttools-libs-designerredhat-upgrade-qt5-qttools-libs-designer-debuginforedhat-upgrade-qt5-qttools-libs-designercomponentsredhat-upgrade-qt5-qttools-libs-designercomponents-debuginforedhat-upgrade-qt5-qttools-libs-helpredhat-upgrade-qt5-qttools-libs-help-debuginforedhat-upgrade-qt5-qttools-staticredhat-upgrade-qt5-qttools-tests-debuginforedhat-upgrade-qt5-qtwebsocketsredhat-upgrade-qt5-qtwebsockets-debuginforedhat-upgrade-qt5-qtwebsockets-debugsourceredhat-upgrade-qt5-qtwebsockets-develredhat-upgrade-qt5-qtwebsockets-devel-debuginforedhat-upgrade-qt5-qtwebsockets-examplesredhat-upgrade-qt5-qtwebsockets-examples-debuginforedhat-upgrade-qt5-qtwebsockets-tests-debuginforedhat-upgrade-qt5-rpm-macros | Oct 1, 2020 | Sep 14, 2020 | |
| Rocky_linux | rocky-upgrade-qt5-qtwebsocketsrocky-upgrade-qt5-qtwebsockets-debuginforocky-upgrade-qt5-qtwebsockets-debugsourcerocky-upgrade-qt5-qtwebsockets-develrocky-upgrade-qt5-qtwebsockets-devel-debuginforocky-upgrade-qt5-qtwebsockets-examplesrocky-upgrade-qt5-qtwebsockets-examples-debuginfo | Mar 12, 2024 | Sep 14, 2020 | |
| Suse | — | suse-upgrade-libqt5-qtbase-common-develsuse-upgrade-libqt5-qtbase-develsuse-upgrade-libqt5-qtbase-platformtheme-gtk3suse-upgrade-libqt5-qtbase-private-headers-develsuse-upgrade-libqt5concurrent-develsuse-upgrade-libqt5concurrent5suse-upgrade-libqt5core-develsuse-upgrade-libqt5core-private-headers-develsuse-upgrade-libqt5core5suse-upgrade-libqt5dbus-develsuse-upgrade-libqt5dbus-private-headers-develsuse-upgrade-libqt5dbus5suse-upgrade-libqt5gui-develsuse-upgrade-libqt5gui-private-headers-develsuse-upgrade-libqt5gui5suse-upgrade-libqt5kmssupport-devel-staticsuse-upgrade-libqt5kmssupport-private-headers-develsuse-upgrade-libqt5network-develsuse-upgrade-libqt5network-private-headers-develsuse-upgrade-libqt5network5suse-upgrade-libqt5opengl-develsuse-upgrade-libqt5opengl-private-headers-develsuse-upgrade-libqt5opengl5suse-upgrade-libqt5openglextensions-devel-staticsuse-upgrade-libqt5platformheaders-develsuse-upgrade-libqt5platformsupport-devel-staticsuse-upgrade-libqt5platformsupport-private-headers-develsuse-upgrade-libqt5printsupport-develsuse-upgrade-libqt5printsupport-private-headers-develsuse-upgrade-libqt5printsupport5suse-upgrade-libqt5sql-develsuse-upgrade-libqt5sql-private-headers-develsuse-upgrade-libqt5sql5suse-upgrade-libqt5sql5-mysqlsuse-upgrade-libqt5sql5-postgresqlsuse-upgrade-libqt5sql5-sqlitesuse-upgrade-libqt5sql5-unixodbcsuse-upgrade-libqt5test-develsuse-upgrade-libqt5test-private-headers-develsuse-upgrade-libqt5test5suse-upgrade-libqt5widgets-develsuse-upgrade-libqt5widgets-private-headers-develsuse-upgrade-libqt5widgets5suse-upgrade-libqt5xml-develsuse-upgrade-libqt5xml5 | Feb 4, 2022 | Feb 10, 2020 |
| Ubuntu | ubuntu-upgrade-libqt5core5aubuntu-upgrade-libqt5gui5 | Feb 11, 2020 | Feb 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub