Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-18281 →
DEBIAN-CVE-2019-18281
An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attack...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to cause a denial of service by crashing an application via a text file containing many directional characters.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-2"}]}]
Debian:13
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-2"}]}]
Debian:14
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-2"}]}]
Debian:12
qtbase-opensource-src-gles
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-1"}]}]
Debian:13
qtbase-opensource-src-gles
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-1"}]}]
Debian:14
qtbase-opensource-src-gles
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.5+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org