p PatchFirst

CVE-2023-51714

CVE-2023-51714

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

CVSS 9.8 · Critical · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qt6-base Debian:12

    Versions
    • 6.10.2+dfsg-1
    • 6.10.2+dfsg-10
    • 6.10.2+dfsg-10+hurd.1
    • 6.10.2+dfsg-11
    • 6.10.2+dfsg-12
    • 6.10.2+dfsg-13
    • 6.10.2+dfsg-14
    • 6.10.2+dfsg-15
    • 6.10.2+dfsg-16
    • 6.10.2+dfsg-2
    • 6.10.2+dfsg-3
    • 6.10.2+dfsg-4
    • 6.10.2+dfsg-5
    • 6.10.2+dfsg-6
    • 6.10.2+dfsg-7
    • 6.10.2+dfsg-7+hurd.1
    • 6.10.2+dfsg-8
    • 6.10.2+dfsg-9
    • 6.11.2+dfsg-1
    • 6.11.2+dfsg-2
    • 6.11.2+dfsg-3
    • 6.11.2+dfsg-4
    • 6.11.2+dfsg-5
    • 6.11.2+dfsg-5+sparc64
    • 6.11.2+dfsg-6
    • 6.11.2+dfsg-7
    • 6.4.2+dfsg-10
    • 6.4.2+dfsg-11
    • 6.4.2+dfsg-11~bpo11+1
    • 6.4.2+dfsg-12
    • 6.4.2+dfsg-13
    • 6.4.2+dfsg-14
    • 6.4.2+dfsg-15
    • 6.4.2+dfsg-16
    • 6.4.2+dfsg-17
    • 6.4.2+dfsg-18
    • 6.4.2+dfsg-18+loong64
    • 6.4.2+dfsg-19
    • 6.4.2+dfsg-20
    • 6.4.2+dfsg-21
    • 6.4.2+dfsg-21.1
    • 6.6.0+dfsg-1
    • 6.6.0+dfsg-2
    • 6.6.0+dfsg-3
    • 6.6.0+dfsg-4
    • 6.6.0+dfsg-5
    • 6.6.0+dfsg-6
    • 6.6.1+dfsg-1
    • 6.6.1+dfsg-2
    • 6.6.1+dfsg-3
    • 6.6.1+dfsg-4
    • 6.6.1+dfsg-5
    • 6.6.1+dfsg-6
    • 6.6.2+dfsg-1
    • 6.6.2+dfsg-10
    • 6.6.2+dfsg-11
    • 6.6.2+dfsg-12
    • 6.6.2+dfsg-2
    • 6.6.2+dfsg-3
    • 6.6.2+dfsg-4
    • 6.6.2+dfsg-5
    • 6.6.2+dfsg-6
    • 6.6.2+dfsg-7
    • 6.6.2+dfsg-8
    • 6.6.2+dfsg-9
    • 6.7.2+dfsg-1
    • 6.7.2+dfsg-2
    • 6.7.2+dfsg-3
    • 6.7.2+dfsg-4
    • 6.7.2+dfsg-4+m68k
    • 6.7.2+dfsg-5
    • 6.7.2+dfsg-6
    • 6.8.2+dfsg-1
    • 6.8.2+dfsg-10
    • 6.8.2+dfsg-10.1
    • 6.8.2+dfsg-2
    • 6.8.2+dfsg-3
    • 6.8.2+dfsg-4
    • 6.8.2+dfsg-5
    • 6.8.2+dfsg-5+m68k
    • 6.8.2+dfsg-6
    • 6.8.2+dfsg-7
    • 6.8.2+dfsg-8
    • 6.8.2+dfsg-9
    • 6.9.1+dfsg-1
    • 6.9.1+dfsg-2
    • 6.9.1+dfsg-3
    • 6.9.1+dfsg-4
    • 6.9.1+dfsg-5
    • 6.9.2+dfsg-1
    • 6.9.2+dfsg-2
    • 6.9.2+dfsg-3
    • 6.9.2+dfsg-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.4.2+dfsg-21

    Update to 6.4.2+dfsg-21

  • qt6-base Debian:14

    Affected ranges
    • ECOSYSTEM: < 6.4.2+dfsg-21

    Update to 6.4.2+dfsg-21

  • qtbase-opensource-src Debian:12

    Versions
    • 5.15.8+dfsg-11
    • 5.15.8+dfsg-11+deb12u1
    Affected ranges
    • ECOSYSTEM: < 5.15.8+dfsg-11+deb12u2

    Update to 5.15.8+dfsg-11+deb12u2

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.15.10+dfsg-6

    Update to 5.15.10+dfsg-6

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.15.10+dfsg-6

    Update to 5.15.10+dfsg-6

  • qtbase-opensource-src-gles Debian:12

    Versions
    • 5.15.10+dfsg-1
    • 5.15.10+dfsg-2
    • 5.15.10+dfsg-3
    • 5.15.10+dfsg-4
    • 5.15.10+dfsg-5
    • 5.15.10+dfsg-6
    • 5.15.12+dfsg-1
    • 5.15.13+dfsg-1
    • 5.15.13+dfsg-2
    • 5.15.15+dfsg-1
    • 5.15.15+dfsg-2
    • 5.15.17+dfsg-1
    • 5.15.17+dfsg-2
    • 5.15.18+dfsg-1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg-2
    • 5.15.8+dfsg-3
    • 5.15.9+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.15.10+dfsg-4

    Update to 5.15.10+dfsg-4

  • qtbase-opensource-src-gles Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.15.10+dfsg-4

    Update to 5.15.10+dfsg-4

  • qtbase-opensource-src-gles Ubuntu:16.04:LTS

    Versions
    • 5.4.2+dfsg-2ubuntu9
    • 5.5.1+dfsg-6ubuntu1
    • 5.5.1+dfsg-10ubuntu1
    • 5.5.1+dfsg-13ubuntu1
    • 5.5.1+dfsg-13ubuntu2
    • 5.5.1+dfsg-13ubuntu3
    • 5.5.1+dfsg-14ubuntu1
    • 5.5.1+dfsg-14ubuntu2
    • 5.5.1+dfsg-14ubuntu3
    • 5.5.1+dfsg-15ubuntu1
    • 5.5.1+dfsg-16ubuntu1
    • 5.5.1+dfsg-16ubuntu4
    • 5.5.1+dfsg-16ubuntu5
    • 5.5.1+dfsg-16ubuntu6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-10ubuntu1
    • 5.9.1+dfsg-10ubuntu2
    • 5.9.2+dfsg-4ubuntu6
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.3+dfsg-0ubuntu3
    • 5.9.3+dfsg-0ubuntu4
    • 5.9.4+dfsg-0ubuntu3
    • 5.9.4+dfsg-0ubuntu4
    • 5.9.5+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2.1
    • 5.9.5+dfsg-0ubuntu2.3
    • 5.9.5+dfsg-0ubuntu2.4
    • 5.9.5+dfsg-0ubuntu2.5
    • 5.9.5+dfsg-0ubuntu2.6
    • 5.9.5+dfsg-0ubuntu2.6+esm1
    Affected ranges
    • ECOSYSTEM: < 5.9.5+dfsg-0ubuntu2.6+esm2

    Update to 5.9.5+dfsg-0ubuntu2.6+esm2

  • qtbase-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-4ubuntu1
    • 5.12.5+dfsg-2
    • 5.12.5+dfsg-8
    • 5.12.5+dfsg-8build1
    • 5.12.5+dfsg-9build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu2.1
    • 5.12.8+dfsg-0ubuntu2.1+esm1
    • 5.12.8+dfsg-0ubuntu2.1+esm2
    Affected ranges
    • ECOSYSTEM: < 5.12.8+dfsg-0ubuntu2.1+esm3

    Update to 5.12.8+dfsg-0ubuntu2.1+esm3

  • qtbase-opensource-src-gles Ubuntu:20.04:LTS

    Versions
    • 5.12.4+dfsg-1build1
    • 5.12.5+dfsg-1
    • 5.12.5+dfsg-2
    • 5.12.8+dfsg-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Ubuntu:22.04:LTS

    Versions
    • 6.2.2+dfsg-5ubuntu1
    • 6.2.2+dfsg-6ubuntu1
    • 6.2.2+dfsg-6ubuntu2
    • 6.2.4+dfsg-1ubuntu1
    • 6.2.4+dfsg-2ubuntu1
    • 6.2.4+dfsg-2ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Ubuntu:22.04:LTS

    Versions
    • 5.15.2+dfsg-4
    • 5.15.2+dfsg-5
    • 5.15.3+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.2+dfsg-12
    • 5.15.2+dfsg-13
    • 5.15.2+dfsg-14
    • 5.15.2+dfsg-14ubuntu1
    • 5.15.2+dfsg-14ubuntu3
    • 5.15.2+dfsg-15
    • 5.15.3+dfsg-1
    • 5.15.3+dfsg-2
    • 5.15.3+dfsg-2ubuntu0.1
    • 5.15.3+dfsg-2ubuntu0.2
    • 5.15.3+dfsg-2ubuntu0.2+esm1
    • 5.15.3+dfsg-2ubuntu0.2+esm2
    Affected ranges
    • ECOSYSTEM: < 5.15.3+dfsg-2ubuntu0.2+esm3

    Update to 5.15.3+dfsg-2ubuntu0.2+esm3

Original sources

Check your server →