UBUNTU-CVE-2023-45311

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2023-45311

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-45311.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-45311

Upstream

CVE-2023-45311

Published

2023-10-06T21:15:00Z

Modified

2025-10-24T05:02:17Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a time when it was controlled by an adversary. NOTE: some sources feel that this means that no version is affected any longer, because the URL is not controlled by an adversary.

References

Affected packages

Ubuntu:14.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@1.3.10~dfsg-1?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.18~dfsg-3

1.3.10~dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1.3.10~dfsg-1",
            "binary_name": "npm"
        }
    ]
}

Ubuntu:18.04:LTS

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.9.5+dfsg-0ubuntu2?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.9.1+dfsg-4

5.9.1+dfsg-4ubuntu1

5.9.2+dfsg-2ubuntu1

5.9.3+dfsg-0ubuntu1

5.9.4+dfsg-0ubuntu1

5.9.5+dfsg-0ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.9.5+dfsg-0ubuntu2",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:20.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@6.14.4+ds-1ubuntu2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0+ds6-4

6.*

6.14.4+ds-1ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "6.14.4+ds-1ubuntu2",
            "binary_name": "npm"
        }
    ]
}

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.12.8+dfsg-0ubuntu1.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.12.4+dfsg-1ubuntu1

5.12.4+dfsg-1ubuntu3

5.12.5+dfsg-3ubuntu1

5.12.5+dfsg-6ubuntu2

5.12.5+dfsg-7

5.12.5+dfsg-7build1

5.12.8+dfsg-0ubuntu1

5.12.8+dfsg-0ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.12.8+dfsg-0ubuntu1.1",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:22.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@8.5.1~ds-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.5.2+ds-2

7.24.2+ds-1

7.24.2+ds-2

8.*

8.3.0~ds-1

8.3.0~ds-2

8.3.2~ds-1

8.5.0~ds-1

8.5.1~ds-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "8.5.1~ds-1",
            "binary_name": "npm"
        }
    ]
}

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.9+dfsg-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.6+dfsg-1

5.15.6+dfsg-2

5.15.7+dfsg-2

5.15.8+dfsg-1

5.15.8+dfsg-1build1

5.15.8+dfsg-1build2

5.15.8+dfsg-2

5.15.9+dfsg-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5pdf5"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5pdfwidgets5"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qml-module-qtquick-pdf"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qt5-image-formats-plugin-pdf"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtpdf5-dev"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtpdf5-doc-html"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtpdf5-examples"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.15.9+dfsg-1",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:24.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@9.2.0~ds1-2?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.2.0~ds1-1

9.2.0~ds1-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "9.2.0~ds1-2",
            "binary_name": "npm"
        }
    ]
}

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.16+dfsg-3?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.15+dfsg-2

5.15.15+dfsg-2build2

5.15.15+dfsg-2ubuntu1

5.15.16+dfsg-1

5.15.16+dfsg-1ubuntu2

5.15.16+dfsg-1ubuntu4

5.15.16+dfsg-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5pdf5"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5pdfwidgets5"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qml-module-qtquick-pdf"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qt5-image-formats-plugin-pdf"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtpdf5-dev"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtpdf5-doc-html"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtpdf5-examples"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.15.16+dfsg-3",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:25.04

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@9.2.0~ds1-3?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.2.0~ds1-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "9.2.0~ds1-3",
            "binary_name": "npm"
        }
    ]
}

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.18+dfsg-2?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.17+dfsg-4

5.15.17+dfsg-5

5.15.17+dfsg2-1

5.15.17+dfsg2-2

5.15.17+dfsg2-3

5.15.18+dfsg-1

5.15.18+dfsg-2

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5pdf5"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5pdfwidgets5"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qml-module-qtquick-pdf"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qt5-image-formats-plugin-pdf"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtpdf5-dev"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtpdf5-doc-html"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtpdf5-examples"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.15.18+dfsg-2",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:25.10

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@9.2.0~ds1-3?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.2.0~ds1-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "9.2.0~ds1-3",
            "binary_name": "npm"
        }
    ]
}

qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.19+dfsg2-1?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.18+dfsg-2

5.15.18+dfsg-2build1

5.15.19+dfsg-1

5.15.19+dfsg2-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5pdf5"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5pdfwidgets5"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5webengine-data"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5webengine5"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5webenginecore5"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "libqt5webenginewidgets5"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qml-module-qtquick-pdf"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qml-module-qtwebengine"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qt5-image-formats-plugin-pdf"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtpdf5-dev"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtpdf5-doc-html"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtpdf5-examples"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtwebengine5-dev"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtwebengine5-dev-tools"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtwebengine5-doc-html"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtwebengine5-examples"
        },
        {
            "binary_version": "5.15.19+dfsg2-1",
            "binary_name": "qtwebengine5-private-dev"
        }
    ]
}

Ubuntu:Pro:16.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@3.5.2-0ubuntu4.1.16.04.1~esm1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.4.21+ds-2

3.*

3.5.2-0ubuntu4

3.5.2-0ubuntu4.1.16.04.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "3.5.2-0ubuntu4.1.16.04.1~esm1",
            "binary_name": "npm"
        }
    ]
}

Ubuntu:Pro:18.04:LTS

npm

Package

Name: npm
Purl: pkg:deb/ubuntu/npm@3.5.2-0ubuntu4.1.18.04.1~esm1?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.5.2-0ubuntu4

3.5.2-0ubuntu4.1.18.04.1~esm1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "3.5.2-0ubuntu4.1.18.04.1~esm1",
            "binary_name": "npm"
        }
    ]
}