Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2020-0317-1.NASL
HistoryFeb 05, 2020 - 12:00 a.m.

SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0317-1)

2020-02-0500:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
17

7.7 High

AI Score

Confidence

High

JSON

This update for libqt5-qtbase fixes the following issues :

Security issues fixed :

CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167).

CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597).

CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:0317-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(133493);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/28");

  script_cve_id("CVE-2018-19870", "CVE-2018-19872", "CVE-2020-0569");

  script_name(english:"SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0317-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for libqt5-qtbase fixes the following issues :

Security issues fixed :

CVE-2020-0569: Fixed a potential local code execution by loading
plugins from CWD (bsc#1161167).

CVE-2018-19870: Fixed an improper check in QImage allocation which
could allow Denial of Service when opening crafted gif files
(bsc#1118597).

CVE-2018-19872: Fixed an issue which could allow a division by zero
leading to crash (bsc#1130246).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1118597");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1130246");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1161167");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-19870/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-19872/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2020-0569/");
  # https://www.suse.com/support/update/announcement/2020/suse-su-20200317-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?57a01680");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud 8 :

zypper in -t patch SUSE-OpenStack-Cloud-8-2020-317=1

SUSE Linux Enterprise Software Development Kit 12-SP5 :

zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-317=1

SUSE Linux Enterprise Software Development Kit 12-SP4 :

zypper in -t patch SUSE-SLE-SDK-12-SP4-2020-317=1

SUSE Linux Enterprise Server for SAP 12-SP3 :

zypper in -t patch SUSE-SLE-SAP-12-SP3-2020-317=1

SUSE Linux Enterprise Server 12-SP5 :

zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-317=1

SUSE Linux Enterprise Server 12-SP4 :

zypper in -t patch SUSE-SLE-SERVER-12-SP4-2020-317=1

SUSE Linux Enterprise Server 12-SP3-LTSS :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-2020-317=1

SUSE Linux Enterprise Server 12-SP3-BCL :

zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2020-317=1

SUSE Linux Enterprise Desktop 12-SP4 :

zypper in -t patch SUSE-SLE-DESKTOP-12-SP4-2020-317=1

SUSE Enterprise Storage 5 :

zypper in -t patch SUSE-Storage-5-2020-317=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-19870");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/12/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/02/04");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/05");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Concurrent5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Concurrent5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Core5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Core5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5DBus5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5DBus5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Gui5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Gui5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Network5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Network5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5OpenGL5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5OpenGL5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5PrintSupport5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5PrintSupport5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-mysql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-mysql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-postgresql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-postgresql-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-sqlite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-sqlite-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-unixODBC");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Sql5-unixODBC-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Test5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Test5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Widgets5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Widgets5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Xml5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libQt5Xml5-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libqt5-qtbase-debugsource");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(3|4|5)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP3/4/5", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(4)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP4", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Concurrent5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Concurrent5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Core5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Core5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5DBus5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5DBus5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Gui5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Gui5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Network5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Network5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5OpenGL5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5OpenGL5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5PrintSupport5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5PrintSupport5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-mysql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-mysql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-postgresql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-postgresql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-sqlite-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-sqlite-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-unixODBC-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Sql5-unixODBC-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Test5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Test5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Widgets5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Widgets5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Xml5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libQt5Xml5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"4", reference:"libqt5-qtbase-debugsource-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Concurrent5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Concurrent5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Core5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Core5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5DBus5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5DBus5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Gui5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Gui5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Network5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Network5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5OpenGL5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5OpenGL5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5PrintSupport5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5PrintSupport5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-mysql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-mysql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-postgresql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-postgresql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-sqlite-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-sqlite-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-unixODBC-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Sql5-unixODBC-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Test5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Test5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Widgets5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Widgets5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Xml5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libQt5Xml5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libqt5-qtbase-debugsource-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Concurrent5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Concurrent5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Core5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Core5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5DBus5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5DBus5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Gui5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Gui5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Network5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Network5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5OpenGL5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5OpenGL5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5PrintSupport5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5PrintSupport5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-mysql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-mysql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-postgresql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-postgresql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-sqlite-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-sqlite-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-unixODBC-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Sql5-unixODBC-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Test5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Test5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Widgets5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Widgets5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Xml5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libQt5Xml5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLES12", sp:"5", reference:"libqt5-qtbase-debugsource-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Concurrent5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Concurrent5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Core5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Core5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5DBus5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5DBus5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Gui5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Gui5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Network5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Network5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5OpenGL5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5OpenGL5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5PrintSupport5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5PrintSupport5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-mysql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-mysql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-postgresql-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-postgresql-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-sqlite-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-sqlite-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-unixODBC-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Sql5-unixODBC-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Test5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Test5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Widgets5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Widgets5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Xml5-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libQt5Xml5-debuginfo-5.6.2-6.22.1")) flag++;
if (rpm_check(release:"SLED12", sp:"4", cpu:"x86_64", reference:"libqt5-qtbase-debugsource-5.6.2-6.22.1")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libqt5-qtbase");
}
VendorProductVersionCPE
novellsuse_linuxlibqt5sql5-sqlitep-cpe:/a:novell:suse_linux:libqt5sql5-sqlite
novellsuse_linuxlibqt5sql5-sqlite-debuginfop-cpe:/a:novell:suse_linux:libqt5sql5-sqlite-debuginfo
novellsuse_linuxlibqt5sql5-unixodbcp-cpe:/a:novell:suse_linux:libqt5sql5-unixodbc
novellsuse_linuxlibqt5sql5-unixodbc-debuginfop-cpe:/a:novell:suse_linux:libqt5sql5-unixodbc-debuginfo
novellsuse_linuxlibqt5test5p-cpe:/a:novell:suse_linux:libqt5test5
novellsuse_linuxlibqt5test5-debuginfop-cpe:/a:novell:suse_linux:libqt5test5-debuginfo
novellsuse_linuxlibqt5widgets5p-cpe:/a:novell:suse_linux:libqt5widgets5
novellsuse_linuxlibqt5widgets5-debuginfop-cpe:/a:novell:suse_linux:libqt5widgets5-debuginfo
novellsuse_linuxlibqt5xml5p-cpe:/a:novell:suse_linux:libqt5xml5
novellsuse_linuxlibqt5xml5-debuginfop-cpe:/a:novell:suse_linux:libqt5xml5-debuginfo
Rows per page:
1-10 of 321

Related

nessus 59
openvas 44
suse 2
ubuntu 2
debiancve 3
fedora 25
mageia 3
prion 3
veracode 3
cve 3
ubuntucve 4
osv 12
redhatcve 3
altlinux 1
amazon 3
redhat 5
debian 8
f5 2
centos 3
oraclelinux 5
cbl_mariner 2
almalinux 1
intel 1
rocky 1
gentoo 1
nessus
nessus
SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0318-1)
2020-02-05 00:00:00
SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0319-1)
2020-02-05 00:00:00
SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2019:0927-1)
2019-04-11 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0318-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0317-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0319-1)
2021-04-19 00:00:00
suse
suse
Security update for libqt5-qtbase (moderate)
2019-04-18 00:00:00
Security update for libqt5-qtbase (important)
2020-02-11 00:00:00
ubuntu
ubuntu
Qt vulnerabilities
2020-02-10 00:00:00
Qt vulnerabilities
2019-06-03 00:00:00
debiancve
debiancve
CVE-2018-19872
2019-03-21 16:00:00
CVE-2018-19870
2018-12-26 21:29:00
CVE-2020-0569
2020-11-23 17:15:00
fedora
fedora
[SECURITY] Fedora 29 Update: qt-4.8.7-45.fc29
2019-03-31 03:02:25
[SECURITY] Fedora 30 Update: qt-4.8.7-47.fc30
2019-03-29 19:42:32
[SECURITY] Fedora 28 Update: qt-4.8.7-45.fc28
2019-04-01 01:22:07
mageia
mageia
Updated qt4 packages fix security vulnerability
2019-05-12 12:35:33
Updated qtbase5 packages fix security vulnerabilities
2020-02-09 22:13:40
Updated qt4 packages fix security vulnerabilities
2020-05-08 13:57:54
prion
prion
Design/Logic Flaw
2019-03-21 16:00:00
Null pointer dereference
2018-12-26 21:29:00
Cross site scripting
2020-11-23 17:15:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:38:33
Arbitrary Code Execution
2019-11-06 00:20:49
Remote Code Execution (RCE)
2020-10-01 03:52:17
cve
cve
CVE-2018-19872
2019-03-21 16:00:00
CVE-2018-19870
2018-12-26 21:29:00
CVE-2020-0569
2020-11-23 17:15:00
ubuntucve
ubuntucve
CVE-2018-19872
2019-03-21 00:00:00
CVE-2018-19870
2018-12-26 00:00:00
CVE-2020-0569
2020-02-03 00:00:00
osv
osv
CVE-2018-19872
2019-03-21 16:00:32
CVE-2018-19870
2018-12-26 21:29:02
qtbase-opensource-src - security update
2020-02-01 00:00:00
redhatcve
redhatcve
CVE-2018-19872
2020-04-01 02:29:10
CVE-2018-19870
2020-04-01 02:29:06
CVE-2020-0569
2020-03-18 14:13:56
altlinux
altlinux
Security fix for the ALT Linux 8 package qt4 version 4.8.7-alt7.1
2019-09-07 00:00:00
amazon
amazon
Medium: qt
2020-07-14 02:42:00
Medium: qt5-qtbase
2020-02-24 22:05:00
Medium: qt5-qtbase
2020-10-22 18:38:00
redhat
redhat
(RHSA-2020:1172) Moderate: qt security update
2020-03-31 09:27:54
(RHSA-2020:4025) Moderate: qt5-qtbase security update
2020-09-29 07:52:26
(RHSA-2019:3390) Moderate: qt5-qtbase security and bug fix update
2019-11-05 17:40:12
debian
debian
[SECURITY] [DLA 2092-1] qtbase-opensource-src security update
2020-02-01 00:51:19
[SECURITY] [DLA 2376-1] qtbase-opensource-src security update
2020-09-28 07:00:12
[SECURITY] [DLA 2377-1] qt4-x11 security update
2020-09-28 07:00:26
f5
f5
K42941419 : Multiple Qt vulnerabilities
2022-03-14 00:00:00
K08037765 : Qt vulnerabilities CVE-2018-19869, CVE-2018-19870, CVE-2018-19871, and CVE-2018-19873
2022-04-22 00:00:00
centos
centos
qt security update
2020-04-08 19:12:37
qt5 security update
2020-10-20 18:51:15
qt5 security update
2019-08-30 04:05:56
oraclelinux
oraclelinux
qt security update
2020-04-06 00:00:00
qt5-qtbase security update
2020-10-06 00:00:00
qt5 security, bug fix, and enhancement update
2020-05-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-0569 affecting package qt5-qtsvg 5.12.11-6
2023-05-25 09:38:10
CVE-2020-0569 affecting package qt5-qtsvg 5.12.11-4
2024-04-26 21:08:17
almalinux
almalinux
Moderate: qt5 security, bug fix, and enhancement update
2020-04-28 09:02:52
intel
intel
IntelĀ® PROSet/Wireless WiFi Software Advisory
2021-02-11 00:00:00
rocky
rocky
qt5 security, bug fix, and enhancement update
2020-04-28 09:02:52
gentoo
gentoo
QtCore: Multiple vulnerabilities
2020-03-26 00:00:00

7.7 High

AI Score

Confidence

High

JSON
Related for SUSE_SU-2020-0317-1.NASL
nessus59openvas44suse2ubuntu2debiancve3fedora25mageia3prion3veracode3cve3ubuntucve4osv12redhatcve3altlinux1amazon3redhat5debian8f52centos3oraclelinux5cbl_mariner2almalinux1intel1rocky1gentoo1