VDB

DEBIAN-CVE-2023-33285

DEBIAN-CVE-2023-33285 PUBLISHED CVSS 5.300000190734863 MEDIUM

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Debian:12qt6-base0
Debian:13qtbase-opensource-src0
Debian:13qtbase-opensource-src-gles0
Debian:12qtbase-opensource-src0
Debian:14qtbase-opensource-src-gles0
Debian:12qtbase-opensource-src-gles5.15.9+dfsg-1, 5.15.19+dfsg-1, 5.15.19+dfsg-2
Debian:14qt6-base0
Debian:13qt6-base0
Debian:14qtbase-opensource-src0

Timeline

  • May 22, 2023 CVE Published
  • Oct 26, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›