CVE-2018-19871
CVE-2018-19871
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
CVSS 6.5 · Medium · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
qtimageformats-opensource-src Debian:12
- Affected ranges
- ECOSYSTEM: < 5.11.3-2
Update to 5.11.3-2
qtimageformats-opensource-src Debian:13
- Affected ranges
- ECOSYSTEM: < 5.11.3-2
Update to 5.11.3-2
qtimageformats-opensource-src Debian:14
- Affected ranges
- ECOSYSTEM: < 5.11.3-2
Update to 5.11.3-2
qt4-x11 Ubuntu:14.04:LTS
- Versions
- 4:4.8.4+dfsg-0ubuntu18
- 4:4.8.4+dfsg-0ubuntu19
- 4:4.8.4+dfsg-0ubuntu20
- 4:4.8.4+dfsg-0ubuntu21
- 4:4.8.4+dfsg-0ubuntu22
- 4:4.8.5+git192-g085f851+dfsg-2ubuntu3
- 4:4.8.5+git192-g085f851+dfsg-2ubuntu4
- 4:4.8.5+git192-g085f851+dfsg-2ubuntu4.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt4-x11 Ubuntu:16.04:LTS
- Versions
- 4:4.8.6+git64-g5dc8b2b+dfsg-3~ubuntu8
- 4:4.8.7+dfsg-5ubuntu1
- 4:4.8.7+dfsg-5ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:16.04:LTS
- Versions
- 5.4.2-2build1
- 5.5.1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qt4-x11 Ubuntu:18.04:LTS
- Versions
- 4:4.8.7+dfsg-7ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:18.04:LTS
- Versions
- 5.9.1-1
- 5.9.2-1
- 5.9.2-2
- 5.9.3-1ubuntu1
- 5.9.4-0ubuntu1
- 5.9.5-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:20.04:LTS
- Versions
- 5.12.4-1
- 5.12.5-1
- 5.12.5-1build1
- 5.12.8-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:22.04:LTS
- Versions
- 5.15.2-2
- 5.15.2-2build1
- 5.15.3-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:24.04:LTS
- Versions
- 5.15.10-2
- 5.15.12-1
- 5.15.12-1build1
- 5.15.12-1build2
- 5.15.13-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:25.10
- Versions
- 5.15.15-3
- 5.15.15-4
- 5.15.17-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:26.10
- Versions
- 5.15.18-1
- 5.15.19-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
qtimageformats-opensource-src Ubuntu:26.04:LTS
- Versions
- 5.15.17-1
- 5.15.17-2
- 5.15.18-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://codereview.qt-project.org/#/c/237761/
- https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00002.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html
- https://access.redhat.com/errata/RHSA-2019:2135
- https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19871