CVE-2023-33285
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.
- Update to 6.4.2+dfsg-10
Published Updated
PatchFirst · Latest vulnerabilities
qt6-base vulnerabilities · Page 2
Vulnerabilities published for qt6-base in the last 30 days: 3. Listed in the KEV catalogue: 0.
Vulnerabilities: 23
CVE-2023-24607
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.
- Update to 6.4.2+dfsg-7
Published UpdatedCVE-2022-25255
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.
- Update to 6.2.4+dfsg-4
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.