Input validation error in qt5-qtbase - CVE-2024-33861

Vulnerability identifier: #VU101888

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-33861

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to an unspecified error. A local user can bypass implemented security restrictions.

qt5-qtbase
Gentoo Linux
openEuler
dev-qt/qtgui
dev-qt/qtnetwork
qt6-qtbase
qt6-qtbase-debuginfo
qt6-qtbase-debugsource
qt6-qtbase-devel
qt6-qtbase-examples
qt6-qtbase-gui
qt6-qtbase-ibase
qt6-qtbase-mysql
qt6-qtbase-odbc
qt6-qtbase-postgresql
qt6-qtbase-private-devel
qt6-qtbase-static
qt6-qtbase-common
dev-qt/qtbase

Install updates from vendor's website.

qt5-qtbase - update to 6.8.1
dev-qt/qtgui - update to 5.15.12-r2
dev-qt/qtnetwork - update to 5.15.14-r1
qt6-qtbase - update to 6.5.2-8
qt6-qtbase-debuginfo - update to 6.5.2-8
qt6-qtbase-debugsource - update to 6.5.2-8
qt6-qtbase-devel - update to 6.5.2-8
qt6-qtbase-examples - update to 6.5.2-8
qt6-qtbase-gui - update to 6.5.2-8
qt6-qtbase-ibase - update to 6.5.2-8
qt6-qtbase-mysql - update to 6.5.2-8
qt6-qtbase-odbc - update to 6.5.2-8
qt6-qtbase-postgresql - update to 6.5.2-8
qt6-qtbase-private-devel - update to 6.5.2-8
qt6-qtbase-static - update to 6.5.2-8
qt6-qtbase-common - update to 6.5.2-8
dev-qt/qtbase - update to 6.8.3-r1

• https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2572

• Input validation error in qt5-qtbase
• openEuler 24.03 LTS update for qt6-qtbase
• Gentoo update for Qt