p PatchFirst

CVE-2018-15518

CVE-2018-15518

This page contains facts from public vulnerability sources. Check the original advisory before updating.

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

CVSS 8.8 · High · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qtbase-opensource-src Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.11.3+dfsg-2

    Update to 5.11.3+dfsg-2

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.11.3+dfsg-2

    Update to 5.11.3+dfsg-2

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.11.3+dfsg-2

    Update to 5.11.3+dfsg-2

  • qtbase-opensource-src Ubuntu:16.04:LTS

    Versions
    • 5.4.2+dfsg-2ubuntu9
    • 5.5.1+dfsg-6ubuntu4
    • 5.5.1+dfsg-10ubuntu2
    • 5.5.1+dfsg-13ubuntu1
    • 5.5.1+dfsg-13ubuntu2
    • 5.5.1+dfsg-13ubuntu3
    • 5.5.1+dfsg-14ubuntu1
    • 5.5.1+dfsg-14ubuntu2
    • 5.5.1+dfsg-14ubuntu3
    • 5.5.1+dfsg-15ubuntu1
    • 5.5.1+dfsg-16ubuntu1
    • 5.5.1+dfsg-16ubuntu6
    • 5.5.1+dfsg-16ubuntu7
    • 5.5.1+dfsg-16ubuntu7.1
    • 5.5.1+dfsg-16ubuntu7.2
    • 5.5.1+dfsg-16ubuntu7.5
    Affected ranges
    • ECOSYSTEM: < 5.5.1+dfsg-16ubuntu7.6

    Update to 5.5.1+dfsg-16ubuntu7.6

  • qtbase-opensource-src Ubuntu:18.04:LTS

    Versions
    • 5.9.1+dfsg-10ubuntu1
    • 5.9.1+dfsg-10ubuntu2
    • 5.9.2+dfsg-4ubuntu6
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.3+dfsg-0ubuntu3
    • 5.9.3+dfsg-0ubuntu4
    • 5.9.4+dfsg-0ubuntu3
    • 5.9.4+dfsg-0ubuntu4
    • 5.9.5+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 5.9.5+dfsg-0ubuntu2.1

    Update to 5.9.5+dfsg-0ubuntu2.1

Original sources

Check your server →