CVE-2023-33285

Summary

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://codereview.qt-project.org/c/qt/qtbase/+/477644
• https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://codereview.qt-project.org/c/qt/qtbase/+/477644
• https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html

• ←Previous
• Next→