An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Qt | Qt | 5.0.0 (including) | 5.15.4 (excluding) |
Qt | Qt | 6.0.0 (including) | 6.2.9 (excluding) |
Qt | Qt | 6.3.0 (including) | 6.5.1 (excluding) |
Red Hat Enterprise Linux 8 | RedHat | qt5-qtbase-0:5.15.3-5.el8 | * |
Red Hat Enterprise Linux 9 | RedHat | qt5-0:5.15.9-1.el9 | * |
Qt6-base | Ubuntu | kinetic | * |
Qt6-base | Ubuntu | lunar | * |
Qt6-base | Ubuntu | mantic | * |
Qt6-base | Ubuntu | oracular | * |
Qt6-base | Ubuntu | trusty | * |
Qt6-base | Ubuntu | xenial | * |
Qtbase-opensource-src | Ubuntu | bionic | * |
Qtbase-opensource-src | Ubuntu | esm-apps/focal | * |
Qtbase-opensource-src | Ubuntu | esm-apps/jammy | * |
Qtbase-opensource-src | Ubuntu | esm-infra/bionic | * |
Qtbase-opensource-src | Ubuntu | esm-infra/xenial | * |
Qtbase-opensource-src | Ubuntu | focal | * |
Qtbase-opensource-src | Ubuntu | jammy | * |
Qtbase-opensource-src | Ubuntu | kinetic | * |
Qtbase-opensource-src | Ubuntu | lunar | * |
Qtbase-opensource-src | Ubuntu | mantic | * |
Qtbase-opensource-src | Ubuntu | oracular | * |
Qtbase-opensource-src | Ubuntu | trusty | * |
Qtbase-opensource-src | Ubuntu | upstream | * |
Qtbase-opensource-src | Ubuntu | xenial | * |