Lucene search
Copyright (C) 2019 Greenbone AGOPENVAS:1361412562310891786HistoryMay 15, 2019 - 12:00 a.m.
Debian: Security Advisory (DLA-1786-1)
2019-05-1500:00:00
Copyright (C) 2019 Greenbone AG
plugins.openvas.org
14
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%
The remote host is missing an update for the Debian
# SPDX-FileCopyrightText: 2019 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.891786");
script_cve_id("CVE-2018-15518", "CVE-2018-19869", "CVE-2018-19870", "CVE-2018-19871", "CVE-2018-19873");
script_tag(name:"creation_date", value:"2019-05-15 02:00:11 +0000 (Wed, 15 May 2019)");
script_version("2024-02-02T05:06:07+0000");
script_tag(name:"last_modification", value:"2024-02-02 05:06:07 +0000 (Fri, 02 Feb 2024)");
script_tag(name:"cvss_base", value:"7.5");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-01-08 20:26:59 +0000 (Tue, 08 Jan 2019)");
script_name("Debian: Security Advisory (DLA-1786-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2019 Greenbone AG");
script_family("Debian Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/debian_linux", "ssh/login/packages", re:"ssh/login/release=DEB8");
script_xref(name:"Advisory-ID", value:"DLA-1786-1");
script_xref(name:"URL", value:"https://www.debian.org/lts/security/2019/DLA-1786-1");
script_xref(name:"URL", value:"https://wiki.debian.org/LTS");
script_tag(name:"summary", value:"The remote host is missing an update for the Debian 'qt4-x11' package(s) announced via the DLA-1786-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"Multiple issues have been addressed in Qt4.
CVE-2018-15518
A double-free or corruption during parsing of a specially crafted illegal XML document.
CVE-2018-19869
A malformed SVG image could cause a segmentation fault in qsvghandler.cpp.
CVE-2018-19870
A malformed GIF image might have caused a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
CVE-2018-19871
There was an uncontrolled resource consumption in QTgaFile.
CVE-2018-19873
QBmpHandler had a buffer overflow via BMP data.
For Debian 8 Jessie, these problems have been fixed in version 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2.
We recommend that you upgrade your qt4-x11 packages.
Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references]");
script_tag(name:"affected", value:"'qt4-x11' package(s) on Debian 8.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-deb.inc");
release = dpkg_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "DEB8") {
if(!isnull(res = isdpkgvuln(pkg:"libqt4-assistant", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-core", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-dbus", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-declarative", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-declarative-folderlistmodel", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-declarative-gestures", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-declarative-particles", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-declarative-shaders", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-designer", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-designer-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-dev", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-dev-bin", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-gui", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-help", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-network", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-opengl", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-opengl-dev", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-phonon", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-private-dev", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-qt3support", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-qt3support-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-script", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-script-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-scripttools", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-ibase", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-mysql", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-odbc", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-psql", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-sqlite", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-sqlite2", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-sql-tds", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-svg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-test", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-webkit", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-webkit-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-xml", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-xmlpatterns", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqt4-xmlpatterns-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqtcore4", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqtdbus4", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"libqtgui4", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qdbus", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-bin-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-default", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-demos", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-demos-dbg", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-designer", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-dev-tools", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-doc", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-doc-html", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-linguist-tools", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-qmake", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-qmlviewer", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qt4-qtconfig", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(!isnull(res = isdpkgvuln(pkg:"qtcore4-l10n", ver:"4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2", rls:"DEB8"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Related
fedora
fedora
[SECURITY] Fedora 29 Update: mingw-qt5-qtmultimedia-5.11.3-1.fc29
2019-01-30 02:08:11
[SECURITY] Fedora 29 Update: mingw-qt5-qtwebkit-5.9.4-0.8.gitbd0657f.fc29
2019-01-30 02:08:12
[SECURITY] Fedora 29 Update: mingw-qt5-qtdeclarative-5.11.3-1.fc29
2019-01-30 02:08:11
oraclelinux
oraclelinux
qt5 security, bug fix, and enhancement update
2019-08-13 00:00:00
qt security update
2020-04-06 00:00:00
qt5-qtbase security and bug fix update
2019-11-14 00:00:00
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : qt5-qtdoc Multiple Vulnerabilities (NS-SA-2023-0018)
2023-04-11 00:00:00
RHEL 7 : qt5 (RHSA-2019:2135)
2019-08-12 00:00:00
openvas
openvas
Fedora Update for mingw-qt5-qtgraphicaleffects FEDORA-2019-3c45bd2cc3
2019-05-07 00:00:00
Fedora Update for mingw-qt5-qtscript FEDORA-2019-3c45bd2cc3
2019-05-07 00:00:00
Fedora Update for mingw-sip FEDORA-2019-3c45bd2cc3
2019-05-07 00:00:00
mageia
mageia
Updated qt4 packages fix security vulnerabilities
2020-05-08 13:57:54
Updated qtbase5 packages fix security vulnerabilities
2019-01-09 00:50:23
osv
osv
qt4-x11 - security update
2019-05-14 00:00:00
qt4-x11 - security update
2020-09-21 00:00:00
qtbase-opensource-src - security update
2019-01-02 00:00:00
redhat
redhat
(RHSA-2019:2135) Moderate: qt5 security, bug fix, and enhancement update
2019-08-06 08:04:56
(RHSA-2020:1172) Moderate: qt security update
2020-03-31 09:27:54
(RHSA-2019:3390) Moderate: qt5-qtbase security and bug fix update
2019-11-05 17:40:12
debian
debian
[SECURITY] [DLA 1786-1] qt4-x11 security update
2019-05-14 05:52:32
[SECURITY] [DLA 2377-1] qt4-x11 security update
2020-09-28 07:00:26
[SECURITY] [DSA 4374-1] qtbase-opensource-src security update
2019-01-28 08:40:08
centos
centos
qt5 security update
2019-08-30 04:05:56
qt security update
2020-04-08 19:12:37
f5
f5
K08037765 : Qt vulnerabilities CVE-2018-19869, CVE-2018-19870, CVE-2018-19871, and CVE-2018-19873
2022-04-22 00:00:00
K42941419 : Multiple Qt vulnerabilities
2022-03-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package qt4 version 4.8.7-alt7.1
2019-09-07 00:00:00
amazon
amazon
Medium: qt
2020-07-14 02:42:00
Medium: qt5-qtbase
2020-02-24 22:05:00
qt
qt
Qt 5.11.3 Released with Important Security Updates
2018-12-04 00:00:00
ubuntu
ubuntu
Qt vulnerabilities
2019-06-03 00:00:00
suse
suse
Security update for libqt4 (moderate)
2020-09-26 00:00:00
Security update for libqt4 (moderate)
2020-09-19 00:00:00
Security update for libqt4 (moderate)
2020-09-22 00:00:00
almalinux
almalinux
Moderate: qt5 security, bug fix, and enhancement update
2020-04-28 09:02:52
rocky
rocky
qt5 security, bug fix, and enhancement update
2020-04-28 09:02:52
debiancve
debiancve
cve
cve
ubuntucve
ubuntucve
prion
prion
Null pointer dereference
2018-12-26 21:29:00
Buffer overflow
2018-12-26 21:29:00
Code injection
2018-12-26 21:29:00
veracode
veracode
Segmentation Fault
2020-04-01 00:38:32
Arbitrary Code Execution
2019-11-06 00:20:50
redhatcve
redhatcve
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%
Related for OPENVAS:1361412562310891786