Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-4549
HistoryDec 23, 2013 - 10:55 p.m.

CVE-2013-4549

2013-12-2322:55:00
CWE-20
[email protected]
web.nvd.nist.gov
26
2
qt
vulnerability
denial of service
memory consumption
xml entity expansion
xee
nvd

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON

QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity Expansion (XEE) attack.

CPENameOperatorVersion
digia:qtdigia qtle5.1.0
qt:qtqteq5.0.2

Social References

More

Related

openvas 26
nessus 17
fedora 14
mageia 3
prion 1
debiancve 1
securityvulns 2
gentoo 1
freebsd 1
ubuntu 1
ubuntucve 1
openvas
openvas
Fedora Update for qt5-qtbase FEDORA-2014-5680
2014-05-12 00:00:00
Fedora Update for qt3 FEDORA-2013-22847
2014-02-03 00:00:00
Fedora Update for qt5-qtbase FEDORA-2014-5710
2014-05-12 00:00:00
nessus
nessus
FreeBSD : qt4-xml -- XML Entity Expansion Denial of Service (89709e58-d497-11e3-a3d5-5453ed2e2b49)
2014-05-06 00:00:00
GLSA-201403-04 : QtCore: Denial of Service
2014-03-14 00:00:00
Fedora 20 : qt-4.8.5-15.fc20 (2013-22860)
2014-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: qt5-qtbase-5.2.1-8.fc19
2014-05-06 03:32:31
[SECURITY] Fedora 19 Update: qt3-3.3.8b-56.fc19
2014-01-23 11:11:04
[SECURITY] Fedora 20 Update: qt-4.8.5-15.fc20
2014-01-22 23:03:31
mageia
mageia
Updated qt5 packages fix security vulnerability.
2014-03-03 23:58:12
Updated qt4 package fixes security vulnerability
2014-01-17 04:20:35
Updated qt3 packages fix security vulnerabilities
2014-06-18 22:02:44
prion
prion
Code injection
2013-12-23 22:55:00
debiancve
debiancve
CVE-2013-4549
2013-12-23 22:55:00
securityvulns
securityvulns
QT resources exhaustion
2013-12-24 00:00:00
[USN-2057-1] Qt vulnerability
2013-12-24 00:00:00
gentoo
gentoo
QtCore: Denial of service
2014-03-13 00:00:00
freebsd
freebsd
qt4-xml -- XML Entity Expansion Denial of Service
2013-12-05 00:00:00
ubuntu
ubuntu
Qt vulnerability
2013-12-17 00:00:00
ubuntucve
ubuntucve
CVE-2013-4549
2013-12-05 00:00:00

6 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.6%

JSON
Related for CVE-2013-4549
openvas26nessus17fedora14mageia3prion1debiancve1securityvulns2gentoo1freebsd1ubuntu1ubuntucve1