qt: QSharedMemory class created shared memory segments with insecure permissions

🗓️ 21 Mar 2013 18:20:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 7 Views

QSharedMemory uses insecure world readable and writable segments in Qt versions, exposing data.

Reporter	Title	Published	Views	Family All 67
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	6	ppc	phonon-backend-gstreamer	1:4.6.2-26.el6_4	phonon-backend-gstreamer-1:4.6.2-26.el6_4.ppc.rpm
Red Hat Enterprise Linux	6	ppc64	phonon-backend-gstreamer	1:4.6.2-26.el6_4	phonon-backend-gstreamer-1:4.6.2-26.el6_4.ppc64.rpm
Red Hat Enterprise Linux	6	s390	phonon-backend-gstreamer	1:4.6.2-26.el6_4	phonon-backend-gstreamer-1:4.6.2-26.el6_4.s390.rpm
Red Hat Enterprise Linux	6	s390x	phonon-backend-gstreamer	1:4.6.2-26.el6_4	phonon-backend-gstreamer-1:4.6.2-26.el6_4.s390x.rpm
Red Hat Enterprise Linux	6	x86_64	phonon-backend-gstreamer	1:4.6.2-26.el6_4	phonon-backend-gstreamer-1:4.6.2-26.el6_4.x86_64.rpm
Red Hat Enterprise Linux	6	any	phonon-backend-gstreamer	1:4.6.2-26.el6_4.i686	phonon-backend-gstreamer-1:4.6.2-26.el6_4.i686.noarch.rpm
Red Hat Enterprise Linux	6	ppc	qt	1:4.6.2-26.el6_4	qt-1:4.6.2-26.el6_4.ppc.rpm
Red Hat Enterprise Linux	6	ppc64	qt	1:4.6.2-26.el6_4	qt-1:4.6.2-26.el6_4.ppc64.rpm
Red Hat Enterprise Linux	6	s390	qt	1:4.6.2-26.el6_4	qt-1:4.6.2-26.el6_4.s390.rpm
Red Hat Enterprise Linux	6	s390x	qt	1:4.6.2-26.el6_4	qt-1:4.6.2-26.el6_4.s390x.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2013-0254
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-0254
cve	www.cve.org/CVERecord

25 Jun 2026 10:39Current

7.3High risk

Vulners AI Score7.3

CVSS 23.6

EPSS0.00422

shared memory insecure permissions world readable world writable qt versions local users read sensitive information modify program data pixmap reading x server unix