Ubuntu.comUB:CVE-2013-4549CVE-2013-4549
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.013 Low
EPSS
Percentile
85.7%
QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to
cause a denial of service (memory consumption) via an XML Entity Expansion
(XEE) attack.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | phantomjs | <Â 1.9.0-1ubuntu0.1~esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 17.10 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu20 | UNKNOWN |
| ubuntu | 18.04 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu20 | UNKNOWN |
| ubuntu | 18.10 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu20 | UNKNOWN |
| ubuntu | 19.04 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu20 | UNKNOWN |
| ubuntu | 12.04 | noarch | qt4-x11 | <Â 4:4.8.1-0ubuntu4.5 | UNKNOWN |
| ubuntu | 12.10 | noarch | qt4-x11 | <Â 4:4.8.3+dfsg-0ubuntu3.2 | UNKNOWN |
| ubuntu | 13.04 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu9.5 | UNKNOWN |
| ubuntu | 13.10 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu18.1 | UNKNOWN |
| ubuntu | 14.04 | noarch | qt4-x11 | <Â 4:4.8.4+dfsg-0ubuntu20 | UNKNOWN |
References
lists.qt-project.org/pipermail/announce/2013-December/000036.html
codereview.qt-project.org/#change,70708
launchpad.net/bugs/cve/CVE-2013-4549
nvd.nist.gov/vuln/detail/CVE-2013-4549
security-tracker.debian.org/tracker/CVE-2013-4549
ubuntu.com/security/notices/USN-2057-1
www.cve.org/CVERecord?id=CVE-2013-4549
Related
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.013 Low
EPSS
Percentile
85.7%