p PatchFirst

CVE-2015-9541

CVE-2015-9541

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.

CVSS 7.5 · High · EPSS 2.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qtbase-opensource-src Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.12.5+dfsg-9

    Update to 5.12.5+dfsg-9

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.12.5+dfsg-9

    Update to 5.12.5+dfsg-9

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.12.5+dfsg-9

    Update to 5.12.5+dfsg-9

  • pyside Ubuntu:14.04:LTS

    Versions
    • 1.1.2-4
    • 1.2.1-1
    • 1.2.1-1build1
    • 1.2.1-2
    • 1.2.1-4
    • 1.2.1-4build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt4-x11 Ubuntu:14.04:LTS

    Versions
    • 4:4.8.4+dfsg-0ubuntu18
    • 4:4.8.4+dfsg-0ubuntu19
    • 4:4.8.4+dfsg-0ubuntu20
    • 4:4.8.4+dfsg-0ubuntu21
    • 4:4.8.4+dfsg-0ubuntu22
    • 4:4.8.5+git192-g085f851+dfsg-2ubuntu3
    • 4:4.8.5+git192-g085f851+dfsg-2ubuntu4
    • 4:4.8.5+git192-g085f851+dfsg-2ubuntu4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt4-x11 Ubuntu:16.04:LTS

    Versions
    • 4:4.8.6+git64-g5dc8b2b+dfsg-3~ubuntu8
    • 4:4.8.7+dfsg-5ubuntu1
    • 4:4.8.7+dfsg-5ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:16.04:LTS

    Versions
    • 5.4.2+dfsg-2ubuntu9
    • 5.5.1+dfsg-6ubuntu4
    • 5.5.1+dfsg-10ubuntu2
    • 5.5.1+dfsg-13ubuntu1
    • 5.5.1+dfsg-13ubuntu2
    • 5.5.1+dfsg-13ubuntu3
    • 5.5.1+dfsg-14ubuntu1
    • 5.5.1+dfsg-14ubuntu2
    • 5.5.1+dfsg-14ubuntu3
    • 5.5.1+dfsg-15ubuntu1
    • 5.5.1+dfsg-16ubuntu1
    • 5.5.1+dfsg-16ubuntu6
    • 5.5.1+dfsg-16ubuntu7
    • 5.5.1+dfsg-16ubuntu7.1
    • 5.5.1+dfsg-16ubuntu7.2
    • 5.5.1+dfsg-16ubuntu7.5
    • 5.5.1+dfsg-16ubuntu7.6
    • 5.5.1+dfsg-16ubuntu7.7
    • 5.5.1+dfsg-16ubuntu7.7+esm1
    • 5.5.1+dfsg-16ubuntu7.7+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phantomjs Ubuntu:16.04:LTS

    Versions
    • 1.9.0-1
    • 2.0.0+dfsg-1
    • 2.1.1+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside Ubuntu:16.04:LTS

    Versions
    • 1.2.2-2
    • 1.2.2-2build1
    • 1.2.2-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-10ubuntu1
    • 5.9.1+dfsg-10ubuntu2
    • 5.9.2+dfsg-4ubuntu6
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.3+dfsg-0ubuntu3
    • 5.9.3+dfsg-0ubuntu4
    • 5.9.4+dfsg-0ubuntu3
    • 5.9.4+dfsg-0ubuntu4
    • 5.9.5+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2.1
    • 5.9.5+dfsg-0ubuntu2.3
    • 5.9.5+dfsg-0ubuntu2.4
    • 5.9.5+dfsg-0ubuntu2.5
    • 5.9.5+dfsg-0ubuntu2.6
    • 5.9.5+dfsg-0ubuntu2.6+esm1
    • 5.9.5+dfsg-0ubuntu2.6+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phantomjs Ubuntu:18.04:LTS

    Versions
    • 2.1.1+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside Ubuntu:18.04:LTS

    Versions
    • 1.2.2+source1-1build1
    • 1.2.2+source1-2
    • 1.2.2+source1-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt4-x11 Ubuntu:18.04:LTS

    Versions
    • 4:4.8.7+dfsg-7ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phantomjs Ubuntu:20.04:LTS

    Versions
    • 2.1.1+dfsg-2
    • 2.1.1+dfsg-2ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside2 Ubuntu:20.04:LTS

    Versions
    • 5.11.2-3build2
    • 5.11.2-3ubuntu1
    • 5.11.2-3ubuntu2
    • 5.13.2-2.2
    • 5.14.0-1~exp1ubuntu2
    • 5.14.0-1~exp1ubuntu3
    • 5.14.0-1~exp1ubuntu4
    • 5.14.0-1~exp1ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside2 Ubuntu:22.04:LTS

    Versions
    • 5.15.2-1
    • 5.15.2-2
    • 5.15.2-2build1
    • 5.15.2-2build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside2 Ubuntu:24.04:LTS

    Versions
    • 5.15.10-4
    • 5.15.11-1
    • 5.15.12-6
    • 5.15.12-6.1build1
    • 5.15.12-6.1build2
    • 5.15.12-6.1build3
    • 5.15.13-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pyside2 Ubuntu:25.10

    Versions
    • 5.15.16-3.1build1
    • 5.15.16-3.1build2
    • 5.15.16-3.1build3
    • 5.15.16-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →