HIGH 7.5 Microsoft
CVE-2023-24607
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13 6.x before 6.2.8 and 6.3.x before 6.4.3.
Microsoft Security Update 2023-Apr: Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13 6.x before 6.2.8 and 6.3.x before 6.4.3.
Affected Products
- cm1 qt5-qtbase 5.12.11-4 on CBL Mariner 1.0
- cbl2 qt5-qtbase 5.15.9-1 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24607
- https://nvd.nist.gov/vuln/detail/CVE-2023-24607
This high severity vulnerability with a CVSS score of 7.5 was published on 2023-04-11 via Microsoft. Affected: cm1 qt5-qtbase 5.12.11-4 on CBL Mariner 1.0, cbl2 qt5-qtbase 5.15.9-1 on CBL Mariner 2.0.
vulnfeed aggregates 16756 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.