Published: 15/04/2023 Updated: 01/05/2024

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Qt prior to 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x prior to 5.15.13, 6.x prior to 6.2.8, and 6.3.x prior to 6.4.3.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qt qt

Debian Bug report logs - #1031871 qt6-base: CVE-2023-24607 Package: src:qt6-base; Maintainer for src:qt6-base is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 24 Feb 2023 16:03:06 UTC Severity: important Tags: security, upstream Fixed in versi ...

When using the Qt SQL ODBC driver plugin, then it is possible to trigger a DOS with a specifically crafted string RESERVEDNOTE: wwwqtio/blog/security-advisory-qt-sql-odbc-driver-pluginNOTE: githubcom/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d (64)NOTE: downloadqtio/official_releases/qt/515/CVE-2023-2460 ...

DescriptionThe MITRE CVE dictionary describes this issue as: Qt before 643 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4 The affected versions are 5x before 51513, 6x before 628, and 63x before 643 ...

NVD-CWE-noinfo https://codereview.qt-project.org/c/qt/qtbase/+/456216 https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238 https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217 https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin https://www.qt.io/blog/tag/security https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031871 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2023-2036.html

CVE-2023-24607

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect