Unrated

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a craf...

CVE-2023-33285 First seen on SecPulse May 22, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2023-33285 qt6-base Fixed in: 6.4.2+dfsg-10
Ubuntu UBUNTU-CVE-2023-33285 qtbase-opensource-src Fixed in: 5.5.1+dfsg-16ubuntu7.7+esm1

Original description The description as published by the source.

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web codereview.qt-project.org
web lists.debian.org

Key facts

Severity: Unrated
Published: May 22, 2023
First seen on SecPulse: May 22, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)00:42