The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - qt: QPluginLoader loads plugins relative to CWD which could result in arbitrary code execution     (CVE-2020-24742)

  - qt: incorrect integer overflow check (CVE-2023-51714)

  - Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of     service (application crash) via a xml file with multiple nested open tags. (CVE-2016-10040)

  - An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in     gui/image/qxbmhandler.cpp has a buffer over-read. (CVE-2020-17507)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a     duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference     CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been     removed to prevent accidental usage (CVE-2020-24741)

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

  - Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath     (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke). (CVE-2021-38593)

  - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in     QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and     QPathClipper::intersect). (CVE-2021-45930)

  - In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg     QSvgFont m_unitsPerEm initialization is mishandled. (CVE-2023-32573)

  - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2.
    Certificate validation for TLS does not always consider whether the root of a chain is a configured CA     certificate. (CVE-2023-34410)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for libqt4 fixes the following issues :

LibQt4 was updated to 4.8.7 (bsc#1039291, CVE-2016-10040) :

See &#9;http://download.qt.io/official_releases/qt/4.8/4.8.7/changes-4.8.7 for more details.

Also libQtWebkit4 was updated to 2.3.4 to match libqt4.

Also following bugs were fixed :

  - Enable libqt4-devel-32bit (bsc#982826)

  - Fixed bolder font in Qt4 apps (boo#956357)

This update was imported from the SUSE:SLE-12:Update update project.

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to actually fit on the CPU stack. This fix decreases the limit to 4096.)

It also fixes the QMySql driver to work with the version of MariaDB in Fedora 27.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - qt: stack overflow in QXmlSimpleReader (CVE-2016-10040)

  - qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp (CVE-2020-17507)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This update for libqt4 fixes the following issues: LibQt4 was updated to 4.8.7 (bsc#1039291, CVE-2016-10040): See http://download.qt.io/official_releases/qt/4.8/4.8.7/changes-4.8.7 for more details. Also libQtWebkit4 was updated to 2.3.4 to match libqt4.
Also following bugs were fixed :

  - Enable libqt4-devel-32bit (bsc#982826)

  - Fixed bolder font in Qt4 apps (boo#956357)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to actually fit on the CPU stack. This fix decreases the limit to 4096.)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - qt: QPluginLoader loads plugins relative to CWD which could result in arbitrary code execution     (CVE-2020-24742)

  - qt: incorrect integer overflow check (CVE-2023-51714)

  - Stack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a denial of     service (application crash) via a xml file with multiple nested open tags. (CVE-2016-10040)

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a     duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference     CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been     removed to prevent accidental usage (CVE-2020-24741)

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

  - Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath     (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke). (CVE-2021-38593)

  - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in     QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and     QPathClipper::intersect). (CVE-2021-45930)

  - In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg     QSvgFont m_unitsPerEm initialization is mishandled. (CVE-2023-32573)

  - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2.
    Certificate validation for TLS does not always consider whether the root of a chain is a configured CA     certificate. (CVE-2023-34410)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
195460	RHEL 6 : qt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
111097	openSUSE Security Update : libqt4 (openSUSE-2018-726)	Nessus	SuSE Local Security Checks	7/16/2018	1/19/2021	medium
110425	Fedora 27 : qt3 (2018-0a0da2f3b7)	Nessus	Fedora Local Security Checks	6/11/2018	1/6/2021	medium
195374	RHEL 5 : qt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium
110966	SUSE SLED12 / SLES12 Security Update : libqt4 (SUSE-SU-2018:1902-1)	Nessus	SuSE Local Security Checks	7/9/2018	1/13/2021	medium
120254	Fedora 28 : qt3 (2018-17843a895b)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	medium
195355	RHEL 7 : qt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

critical

medium

medium

medium

medium

medium

critical