CVE-2018-19873

• 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "16.04"
                },
                {
                    "last_affected":  "16.04"
                },
                {
                    "introduced":  "18.04"
                },
                {
                    "last_affected":  "18.04"
                },
                {
                    "introduced":  "18.10"
                },
                {
                    "last_affected":  "18.10"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "canonical:ubuntu_linux"
        },
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.0"
                },
                {
                    "last_affected":  "8.0"
                },
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        },
        {
            "cpes":  [
                "cpe:2.3:o:opensuse:backports:sle-15:sp1:*:*:*:*:*:*",
                "cpe:2.3:o:opensuse:backports:sle-15:sp2:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "sle-15-sp1"
                },
                {
                    "last_affected":  "sle-15-sp1"
                },
                {
                    "introduced":  "sle-15-sp2"
                },
                {
                    "last_affected":  "sle-15-sp2"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "opensuse:backports"
        },
        {
            "cpes":  [
                "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
                "cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "15.1"
                },
                {
                    "last_affected":  "15.1"
                },
                {
                    "introduced":  "15.2"
                },
                {
                    "last_affected":  "15.2"
                },
                {
                    "introduced":  "42.3"
                },
                {
                    "last_affected":  "42.3"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "opensuse:leap"
        }
    ]
}

• http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00066.html
• https://access.redhat.com/errata/RHSA-2019:2135
• https://access.redhat.com/errata/RHSA-2019:3390
• https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
• https://lists.debian.org/debian-lts-announce/2019/01/msg00004.html
• https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
• https://usn.ubuntu.com/4003-1/
• https://www.debian.org/security/2019/dsa-4374
• https://codereview.qt-project.org/#/c/238749/
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00073.html
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00090.html