Code Injection in Qt - CVE-2022-25255

Vulnerability identifier: #VU61830

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-25255

CWE-ID: CWE-94

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to QProcess can execute a binary from the current working directory when not found in the PATH. A local user can execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Qt
Oracle Linux
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for Power, little endian
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Oracle Solaris
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
openEuler
Telemetry Dashboard
Liquidware
Citrix Workspace App
Webex App VDI
qutebrowser
Red Hat OpenShift Container Platform
VMware Horizon Client
OpenShift Logging
Red Hat Advanced Cluster Management for Kubernetes
qt5 (Red Hat package)
qtbase-opensource-src (Ubuntu package)
qt5-qtbase-debugsource
qt5-qtbase
qt5-qtbase-devel
qt5-qtbase-odbc
qt5-qtbase-postgresql
qt5-qtbase-mysql
qt5-qtbase-gui
qt5-qtbase-common
qt5-qtbase-debuginfo
libQt5Widgets5-debuginfo
libqt5-qtbase-platformtheme-gtk3
libqt5-qtbase-debugsource
libqt5-qtbase-common-devel-debuginfo
libqt5-qtbase-common-devel
libQt5Xml5-debuginfo
libQt5Xml5
libQt5Xml-devel
libQt5Widgets5
libQt5Widgets-devel
libqt5-qtbase-devel
libQt5Test5-debuginfo
libqt5-qtbase-platformtheme-gtk3-debuginfo
libQt5Core-private-headers-devel
libQt5DBus-private-headers-devel
libQt5Gui-private-headers-devel
libQt5KmsSupport-private-headers-devel
libQt5Network-private-headers-devel
libQt5OpenGL-private-headers-devel
libQt5PlatformSupport-private-headers-devel
libQt5PrintSupport-private-headers-devel
libQt5Sql-private-headers-devel
libQt5Test-private-headers-devel
libQt5Widgets-private-headers-devel
libqt5-qtbase-private-headers-devel
libQt5DBus5-debuginfo
libQt5OpenGL5
libQt5OpenGL-devel
libQt5Network5-debuginfo
libQt5Network5
libQt5Network-devel
libQt5KmsSupport-devel-static
libQt5Gui5-debuginfo
libQt5Gui5
libQt5Gui-devel
libQt5Test-devel
libQt5DBus5
libQt5DBus-devel-debuginfo
libQt5DBus-devel
libQt5Core5-debuginfo
libQt5Core5
libQt5Core-devel
libQt5Concurrent5-debuginfo
libQt5Concurrent5
libQt5Concurrent-devel
libQt5OpenGLExtensions-devel-static
libQt5OpenGL5-debuginfo
libQt5Sql5-sqlite-debuginfo
libQt5Sql5-unixODBC
libQt5Sql5-unixODBC-debuginfo
libQt5Test5
libQt5Sql5-sqlite
libQt5Sql5-postgresql-debuginfo
libQt5Sql5-postgresql
libQt5Sql5-mysql-debuginfo
libQt5Sql5-mysql
libQt5Sql5-debuginfo
libQt5Sql5
libQt5Sql-devel
libQt5PrintSupport5-debuginfo
libQt5PrintSupport5
libQt5PrintSupport-devel
libQt5PlatformSupport-devel-static
libQt5PlatformHeaders-devel
qt5-qtbase-private-devel
qt5-qtbase-static
qt5-qtbase-examples
qt5-rpm-macros
qt5-srpm-macros
Cisco Jabber
Cisco Webex Meetings

Install updates from vendor's website.

Qt - addressed in versions 5.15.9, 6.2.4
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
qutebrowser - update to 2.5.0
Red Hat OpenShift Container Platform - addressed in versions 4.13.2, 4.14.32, 4.14.33
OpenShift Logging - addressed in versions 5.3.14, 5.5.5
qt5 (Red Hat package) - addressed in versions 5.15.3-1.el8, 5.15.3-1.el9
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
Red Hat Advanced Cluster Management for Kubernetes - update to 2.6.3
qtbase-opensource-src (Ubuntu package) - addressed in versions 5.5.1+dfsg-16ubuntu7.7+esm2, 5.9.5+dfsg-0ubuntu2.6+esm2, 5.12.8+dfsg-0ubuntu2.1+esm3, 5.15.3+dfsg-2ubuntu0.2+esm3, 5.15.13+dfsg-1ubuntu1+esm1
qt5-qtbase-debugsource - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-devel - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-odbc - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-postgresql - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-mysql - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-gui - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-common - addressed in versions 5.11.1-13, 5.15.2-3
qt5-qtbase-debuginfo - addressed in versions 5.11.1-13, 5.15.2-3
libQt5Widgets5-debuginfo - update to 5.12.7-4.17.1
libqt5-qtbase-platformtheme-gtk3 - update to 5.12.7-4.17.1
libqt5-qtbase-debugsource - update to 5.12.7-4.17.1
libqt5-qtbase-common-devel-debuginfo - update to 5.12.7-4.17.1
libqt5-qtbase-common-devel - update to 5.12.7-4.17.1
libQt5Xml5-debuginfo - update to 5.12.7-4.17.1
libQt5Xml5 - update to 5.12.7-4.17.1
libQt5Xml-devel - update to 5.12.7-4.17.1
libQt5Widgets5 - update to 5.12.7-4.17.1
libQt5Widgets-devel - update to 5.12.7-4.17.1
libqt5-qtbase-devel - update to 5.12.7-4.17.1
libQt5Test5-debuginfo - update to 5.12.7-4.17.1
libqt5-qtbase-platformtheme-gtk3-debuginfo - update to 5.12.7-4.17.1
libQt5Core-private-headers-devel - update to 5.12.7-4.17.1
libQt5DBus-private-headers-devel - update to 5.12.7-4.17.1
libQt5Gui-private-headers-devel - update to 5.12.7-4.17.1
libQt5KmsSupport-private-headers-devel - update to 5.12.7-4.17.1
libQt5Network-private-headers-devel - update to 5.12.7-4.17.1
libQt5OpenGL-private-headers-devel - update to 5.12.7-4.17.1
libQt5PlatformSupport-private-headers-devel - update to 5.12.7-4.17.1
libQt5PrintSupport-private-headers-devel - update to 5.12.7-4.17.1
libQt5Sql-private-headers-devel - update to 5.12.7-4.17.1
libQt5Test-private-headers-devel - update to 5.12.7-4.17.1
libQt5Widgets-private-headers-devel - update to 5.12.7-4.17.1
libqt5-qtbase-private-headers-devel - update to 5.12.7-4.17.1
libQt5DBus5-debuginfo - update to 5.12.7-4.17.1
libQt5OpenGL5 - update to 5.12.7-4.17.1
libQt5OpenGL-devel - update to 5.12.7-4.17.1
libQt5Network5-debuginfo - update to 5.12.7-4.17.1
libQt5Network5 - update to 5.12.7-4.17.1
libQt5Network-devel - update to 5.12.7-4.17.1
libQt5KmsSupport-devel-static - update to 5.12.7-4.17.1
libQt5Gui5-debuginfo - update to 5.12.7-4.17.1
libQt5Gui5 - update to 5.12.7-4.17.1
libQt5Gui-devel - update to 5.12.7-4.17.1
libQt5Test-devel - update to 5.12.7-4.17.1
libQt5DBus5 - update to 5.12.7-4.17.1
libQt5DBus-devel-debuginfo - update to 5.12.7-4.17.1
libQt5DBus-devel - update to 5.12.7-4.17.1
libQt5Core5-debuginfo - update to 5.12.7-4.17.1
libQt5Core5 - update to 5.12.7-4.17.1
libQt5Core-devel - update to 5.12.7-4.17.1
libQt5Concurrent5-debuginfo - update to 5.12.7-4.17.1
libQt5Concurrent5 - update to 5.12.7-4.17.1
libQt5Concurrent-devel - update to 5.12.7-4.17.1
libQt5OpenGLExtensions-devel-static - update to 5.12.7-4.17.1
libQt5OpenGL5-debuginfo - update to 5.12.7-4.17.1
libQt5Sql5-sqlite-debuginfo - update to 5.12.7-4.17.1
libQt5Sql5-unixODBC - update to 5.12.7-4.17.1
libQt5Sql5-unixODBC-debuginfo - update to 5.12.7-4.17.1
libQt5Test5 - update to 5.12.7-4.17.1
libQt5Sql5-sqlite - update to 5.12.7-4.17.1
libQt5Sql5-postgresql-debuginfo - update to 5.12.7-4.17.1
libQt5Sql5-postgresql - update to 5.12.7-4.17.1
libQt5Sql5-mysql-debuginfo - update to 5.12.7-4.17.1
libQt5Sql5-mysql - update to 5.12.7-4.17.1
libQt5Sql5-debuginfo - update to 5.12.7-4.17.1
libQt5Sql5 - update to 5.12.7-4.17.1
libQt5Sql-devel - update to 5.12.7-4.17.1
libQt5PrintSupport5-debuginfo - update to 5.12.7-4.17.1
libQt5PrintSupport5 - update to 5.12.7-4.17.1
libQt5PrintSupport-devel - update to 5.12.7-4.17.1
libQt5PlatformSupport-devel-static - update to 5.12.7-4.17.1
libQt5PlatformHeaders-devel - update to 5.12.7-4.17.1
qt5-qtbase-private-devel - update to 5.15.2-3
qt5-qtbase-static - update to 5.15.2-3
qt5-qtbase-examples - update to 5.15.2-3
qt5-rpm-macros - update to 5.15.3-1.0.1
qt5-srpm-macros - update to 5.15.3-1.0.1

• https://download.qt.io/official_releases/qt/6.2/qprocess6-2.diff
• https://codereview.qt-project.org/c/qt/qtbase/+/393113
• https://download.qt.io/official_releases/qt/5.15/qprocess5-15.diff
• https://codereview.qt-project.org/c/qt/qtbase/+/396020
• https://codereview.qt-project.org/c/qt/qtbase/+/394914

• Code execution in Qt
• Code execution in qutebrowser
• Red Hat Enterprise Linux 8 update for qt5
• Red Hat Enterprise Linux 9 update for qt5
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in OpenShift Logging 5.5
• SUSE update for libqt5-qtbase
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• openEuler update for qt5-qtbase
• openEuler 22.03 LTS update for qt5-qtbase
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.6
• Anolis OS update for qt5
• Ubuntu update for qtbase-opensource-src