VDB
DEBIAN-CVE-2023-38197
DEBIAN-CVE-2023-38197
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | qtbase-opensource-src-gles | 0 |
| Debian:14 | qtbase-opensource-src-gles | 0 |
| Debian:12 | qt6-base | 6.11.2+dfsg-4, 6.7.2+dfsg-4, 6.7.2+dfsg-4+m68k |
| Debian:13 | qtbase-opensource-src | 0 |
| Debian:12 | qtbase-opensource-src-gles | 5.15.10+dfsg-2, 5.15.19+dfsg-2, 5.15.8+dfsg-3 |
| Debian:14 | qtbase-opensource-src | 0 |
| Debian:12 | qtbase-opensource-src | 5.15.8+dfsg-11, 0 |
| Debian:14 | qt6-base | 0 |
| Debian:13 | qt6-base | 0 |
Timeline
- Jul 13, 2023 CVE Published
- Oct 26, 2026 CVE Updated