Lucene search
HistoryDec 24, 2023 - 9:15 p.m.
CVE-2023-51714
http2 issue
qt 5.15.17
integer overflow check
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
27.4%
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
Affected configurations
Node
qtqtRange<5.15.17
ORqtqtRange6.0.0–6.2.11
ORqtqtRange6.3.0–6.5.4
ORqtqtRange6.6.0–6.6.2
Related
prion
prion
Integer overflow
2023-12-24 21:15:00
osv
osv
CVE-2023-51714
2023-12-24 21:15:25
Moderate: qt5-qtbase security update
2024-05-22 00:00:00
Moderate: qt5-qtbase security update
2024-04-30 00:00:00
debiancve
debiancve
CVE-2023-51714
2023-12-24 21:15:25
nessus
nessus
cvelist
cvelist
CVE-2023-51714
2023-12-24 00:00:00
ubuntucve
ubuntucve
CVE-2023-51714
2023-12-24 00:00:00
qt
qt
Security advisory: Potential Integer Overflow in Qt's HTTP2 implementation
2024-01-02 00:00:00
redos
redos
ROS-20240606-09
2024-06-06 00:00:00
freebsd
freebsd
QtNetwork -- potential buffer overflow
2023-12-14 00:00:00
amazon
amazon
Medium: qt5-qtbase
2024-01-19 01:51:00
redhatcve
redhatcve
CVE-2023-51714
2023-12-25 21:01:32
cbl_mariner
cbl_mariner
CVE-2023-51714 affecting package qtbase for versions less than 6.6.2-1
2024-06-21 09:32:44
cve
cve
CVE-2023-51714
2023-12-24 21:15:25
almalinux
almalinux
Moderate: qt5-qtbase security update
2024-05-22 00:00:00
Moderate: qt5-qtbase security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2276) Moderate: qt5-qtbase security update
2024-04-30 06:15:15
(RHSA-2024:3056) Moderate: qt5-qtbase security update
2024-05-22 06:35:28
gentoo
gentoo
QtNetwork: Multiple Vulnerabilities
2024-02-18 00:00:00
oraclelinux
oraclelinux
qt5-qtbase security update
2024-05-02 00:00:00
qt5-qtbase security update
2024-05-23 00:00:00
debian
debian
[SECURITY] [DLA 3805-1] qtbase-opensource-src security update
2024-04-30 22:47:38
openvas
openvas
Debian: Security Advisory (DLA-3805-1)
2024-05-01 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
27.4%
Related for NVD:CVE-2023-51714