USN-7780-1

Dashboard / Vulnerabilities / USN-7780-1

USN-7780-1

Summary: qtbase-opensource-src vulnerabilities

Details: It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-24607) It was discovered that Qt did not correctly parse certain strict-transport- security headers. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-32762) It was discovered that Qt did not correctly handle certain inputs from DNS servers. A remote attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2023-33285) It was discovered that Qt did not correctly validate certain CA certificates for TLS. An attacker could possibly use this issue to gain access to unauthorized resources. (CVE-2023-34410)

References: https://ubuntu.com/security/notices/USN-7780-1, https://ubuntu.com/security/CVE-2023-24607, https://ubuntu.com/security/CVE-2023-32762, https://ubuntu.com/security/CVE-2023-33285, https://ubuntu.com/security/CVE-2023-34410