Log in Start free

Vulnerability · Published Apr 15, 2023 · Assigned by mitre

CVE-2023-24607

High 7.5

In plain English

A high-severity security flaw in the qt6-base package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.3%top 29.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12qt6-base6.4.2+dfsg-7DEBIAN-CVE-2023-24607
Debian:13qt6-base6.4.2+dfsg-7DEBIAN-CVE-2023-24607
Debian:14qt6-base6.4.2+dfsg-7DEBIAN-CVE-2023-24607
Debian:12qtbase-opensource-src5.15.8+dfsg-3DEBIAN-CVE-2023-24607
Debian:13qtbase-opensource-src5.15.8+dfsg-3DEBIAN-CVE-2023-24607
Debian:14qtbase-opensource-src5.15.8+dfsg-3DEBIAN-CVE-2023-24607
Ubuntu:22.04:LTSqt6-baseno fix listedUBUNTU-CVE-2023-24607
Ubuntu:24.04:LTSqt6-baseno fix listedUBUNTU-CVE-2023-24607
Ubuntu:25.10qt6-baseno fix listedUBUNTU-CVE-2023-24607
Ubuntu:26.04:LTSqt6-baseno fix listedUBUNTU-CVE-2023-24607
Ubuntu:26.10qt6-baseno fix listedUBUNTU-CVE-2023-24607
Ubuntu:22.04:LTSqtbase-opensource-src-glesno fix listedUBUNTU-CVE-2023-24607
Ubuntu:24.04:LTSqtbase-opensource-src-glesno fix listedUBUNTU-CVE-2023-24607
Ubuntu:25.10qtbase-opensource-src-glesno fix listedUBUNTU-CVE-2023-24607
Ubuntu:26.04:LTSqtbase-opensource-src-glesno fix listedUBUNTU-CVE-2023-24607
Ubuntu:26.10qtbase-opensource-src-glesno fix listedUBUNTU-CVE-2023-24607

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References