CVEvulnerability
CVE-2023-24607
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.
Affected configurations
• qt qt (>= 5.0.0 < 5.15.13)
• qt qt (>= 6.0.0 < 6.2.8)
• qt qt (>= 6.3.0 < 6.4.3)
References
- https://codereview.qt-project.org/c/qt/qtbase/+/456216 Issue Tracking
- https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217 Permissions Required
- https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238 Permissions Required
- https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff Vendor Advisory
- https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html lists.debian.org
- https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin Product
- https://www.qt.io/blog/tag/security Release Notes
- https://codereview.qt-project.org/c/qt/qtbase/+/456216 Issue Tracking
- https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456217 Permissions Required
- https://codereview.qt-project.org/c/qt/tqtc-qtbase/+/456238 Permissions Required
- https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff Vendor Advisory
- https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html lists.debian.org
- https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin Product
- https://www.qt.io/blog/tag/security Release Notes