critique
CVE-2023-51714
qt: incorrect integer overflow check
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Azure Linux, CBL-Mariner. Plus basse selon Red Hat (moyenne), AlmaLinux (moyenne), Amazon (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne).
Description
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Azure Linux 3.0 | qtbase | 0:6.6.2-1.azl3 |
| CBL-Mariner 2.0 | qt5-qtbase | 0:5.12.11-10.cm2 |
| alma 8 | qt5-qtbase, qt5-qtbase-common, qt5-qtbase-devel et 7 autres | 5.15.3-7.el8 |
| alma 9 | qt5-qtbase, qt5-qtbase-common, qt5-qtbase-devel et 7 autres | 5.15.9-9.el9 |
| amazon linux 2 | qt5-qtbase, qt5-qtbase-common, qt5-qtbase-debuginfo et 9 autres | 5.9.2-3.amzn2.0.13 |
| debian 10 | qtbase-opensource-src | 5.11.3+dfsg1-1+deb10u6 |
| debian 11 | qtbase-opensource-src, qtbase-opensource-src-gles | 5.15.2+dfsg-9+deb11u1 |
| debian 12 | qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles | 5.15.8+dfsg-11+deb12u2 |
| debian 13 | qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles | 6.4.2+dfsg-21 et 2 autres |
| debian 14 | qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles | 6.4.2+dfsg-21 et 2 autres |
| echo | qt6-base, qtbase-opensource-src, qtbase-opensource-src-gles | 6.4.2+dfsg-21 et 2 autres |
| Oracle Linux 8 | qt5-qtbase, qt5-qtbase-common, qt5-qtbase-devel et 7 autres | 5.15.3-7.el8 |
Afficher les 120 entrées de 21 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Azure Linux 3.0 | qtbase | 0:6.6.2-1.azl3 |
| CBL-Mariner 2.0 | qt5-qtbase | 0:5.12.11-10.cm2 |
| alma 8 | qt5-qtbase | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-common | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-devel | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-examples | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-gui | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-mysql | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-odbc | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-postgresql | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-private-devel | 5.15.3-7.el8 |
| alma 8 | qt5-qtbase-static | 5.15.3-7.el8 |
| alma 9 | qt5-qtbase | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-common | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-devel | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-examples | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-gui | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-mysql | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-odbc | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-postgresql | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-private-devel | 5.15.9-9.el9 |
| alma 9 | qt5-qtbase-static | 5.15.9-9.el9 |
| amazon linux 2 | qt5-qtbase | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-common | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-debuginfo | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-devel | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-doc | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-examples | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-gui | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-mysql | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-odbc | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-postgresql | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-qtbase-static | 5.9.2-3.amzn2.0.13 |
| amazon linux 2 | qt5-rpm-macros | 5.9.2-3.amzn2.0.13 |
| debian 10 | qtbase-opensource-src | 5.11.3+dfsg1-1+deb10u6 |
| debian 11 | qtbase-opensource-src | 5.15.2+dfsg-9+deb11u1 |
| debian 11 | qtbase-opensource-src-gles | pas de correctif indiqué |
| debian 12 | qt6-base | pas de correctif indiqué |
| debian 12 | qtbase-opensource-src | 5.15.8+dfsg-11+deb12u2 |
| debian 12 | qtbase-opensource-src-gles | pas de correctif indiqué |
| debian 13 | qt6-base | 6.4.2+dfsg-21 |
| debian 13 | qtbase-opensource-src | 5.15.10+dfsg-6 |
| debian 13 | qtbase-opensource-src-gles | 5.15.10+dfsg-4 |
| debian 14 | qt6-base | 6.4.2+dfsg-21 |
| debian 14 | qtbase-opensource-src | 5.15.10+dfsg-6 |
| debian 14 | qtbase-opensource-src-gles | 5.15.10+dfsg-4 |
| echo | qt6-base | 6.4.2+dfsg-21 |
| echo | qtbase-opensource-src | 5.15.8+dfsg-11+deb12u2 |
| echo | qtbase-opensource-src-gles | 5.15.10+dfsg-4 |
| Oracle Linux 8 | qt5-qtbase | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-common | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-devel | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-examples | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-gui | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-mysql | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-odbc | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-postgresql | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-private-devel | 5.15.3-7.el8 |
| Oracle Linux 8 | qt5-qtbase-static | 5.15.3-7.el8 |
| Oracle Linux 9 | qt5-qtbase | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-common | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-devel | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-examples | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-gui | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-mysql | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-odbc | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-postgresql | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-private-devel | 5.15.9-9.el9 |
| Oracle Linux 9 | qt5-qtbase-static | 5.15.9-9.el9 |
| rapidfort debian 12 | qt6-base | 0:6.4.2+dfsg-21 |
| rapidfort debian 12 | qtbase-opensource-src-gles | 0:5.15.10+dfsg-4 |
| rapidfort debian 13 | qt6-base | 0:6.4.2+dfsg-21 |
| rapidfort debian 13 | qtbase-opensource-src-gles | 0:5.15.10+dfsg-4 |
| rapidfort Oracle Linux 9 | qt5-qtbase | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-common | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-devel | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-examples | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-gui | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-mysql | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-odbc | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-postgresql | 0:5.15.9-9.el9 |
| rapidfort Oracle Linux 9 | qt5-qtbase-private-devel | 0:5.15.9-9.el9 |
| Red Hat | phonon-backend-gstreamer | pas de correctif indiqué |
| Red Hat | qt | pas de correctif indiqué |
| Red Hat | qt-assistant | pas de correctif indiqué |
| Red Hat | qt-config | pas de correctif indiqué |
| Red Hat | qt-demos | pas de correctif indiqué |
| Red Hat | qt-devel | pas de correctif indiqué |
| Red Hat | qt-devel-private | pas de correctif indiqué |
| Red Hat | qt-doc | pas de correctif indiqué |
| Red Hat | qt-examples | pas de correctif indiqué |
| Red Hat | qt-mysql | pas de correctif indiqué |
| Red Hat | qt-odbc | pas de correctif indiqué |
| Red Hat | qt-postgresql | pas de correctif indiqué |
| Red Hat | qt-qdbusviewer | pas de correctif indiqué |
| Red Hat | qt-qvfb | pas de correctif indiqué |
| Red Hat | qt-sqlite | pas de correctif indiqué |
| Red Hat | qt-x11 | pas de correctif indiqué |
| Red Hat | qt3 | pas de correctif indiqué |
| Red Hat | qt3-MySQL | pas de correctif indiqué |
| Red Hat | qt3-ODBC | pas de correctif indiqué |
| Red Hat | qt3-PostgreSQL | pas de correctif indiqué |
| Red Hat | qt3-config | pas de correctif indiqué |
| Red Hat | qt3-designer | pas de correctif indiqué |
| Red Hat | qt3-devel | pas de correctif indiqué |
| Red Hat | qt3-devel-docs | pas de correctif indiqué |
| Red Hat | qt3-sqlite | pas de correctif indiqué |
| rocky 8 | qt5-qtbase | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-common | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-devel | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-examples | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-gui | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-mysql | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-odbc | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-postgresql | 5.15.3-7.el8 |
| rocky 8 | qt5-qtbase-private-devel | 5.15.3-7.el8 |
| ubuntu 18.04-ESM | qtbase-opensource-src | 5.9.5+dfsg-0ubuntu2.6+esm2 |
| ubuntu 20.04-ESM | qtbase-opensource-src | 5.12.8+dfsg-0ubuntu2.1+esm3 |
| ubuntu 22.04 | qt6-base | pas de correctif indiqué |
| ubuntu 22.04 | qtbase-opensource-src | pas de correctif indiqué |
Références
- https://access.redhat.com/errata/RHSA-2024:2276
- https://access.redhat.com/errata/RHSA-2024:3056
- https://access.redhat.com/security/cve/CVE-2023-51714
- https://bugzilla.redhat.com/2255856
- https://bugzilla.redhat.com/2264423
- https://bugzilla.redhat.com/show_bug.cgi?id=2255856
- https://bugzilla.redhat.com/show_bug.cgi?id=2264423
- https://codereview.qt-project.org/c/qt/qtbase/+/524864
Les 20 références
- https://codereview.qt-project.org/c/qt/qtbase/+/524865/3
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51714
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25580
- https://errata.almalinux.org/9/ALSA-2024-2276.html
- https://errata.rockylinux.org/RLSA-2024:3056
- https://linux.oracle.com/cve/CVE-2023-51714.html
- https://linux.oracle.com/errata/ELSA-2024-3056.html
- https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-51714
- https://ubuntu.com/security/notices/USN-8076-1
- https://www.cve.org/CVERecord?id=CVE-2023-51714