USN-4275-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-4275-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4275-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4275-1

Related

CVE-2018-19872
CVE-2019-18281
CVE-2020-0569
CVE-2020-0570
UBUNTU-CVE-2018-19872
UBUNTU-CVE-2019-18281
UBUNTU-CVE-2020-0569
UBUNTU-CVE-2020-0570

Published

2020-02-10T13:34:41.160181Z

Modified

2020-02-10T13:34:41.160181Z

Summary

qtbase-opensource-src vulnerabilities

Details

It was discovered that Qt incorrectly handled certain PPM images. If a user or automated system were tricked into opening a specially crafted PPM file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19872)

It was discovered that Qt incorrectly handled certain text files. If a user or automated system were tricked into opening a specially crafted text file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubuntu 19.10. (CVE-2019-18281)

It was discovered that Qt incorrectly searched for plugins in the current working directory. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-0569)

It was discovered that Qt incorrectly searched for libraries relative to the current working directory. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 19.10. (CVE-2020-0570)

References

Affected packages

Ubuntu:16.04:LTS / qtbase-opensource-src

Package

Name: qtbase-opensource-src
Purl: pkg:deb/ubuntu/qtbase-opensource-src@5.5.1+dfsg-16ubuntu7.7?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.5.1+dfsg-16ubuntu7.7

Affected versions

5.*

5.4.2+dfsg-2ubuntu9

5.5.1+dfsg-6ubuntu4

5.5.1+dfsg-10ubuntu2

5.5.1+dfsg-13ubuntu1

5.5.1+dfsg-13ubuntu2

5.5.1+dfsg-13ubuntu3

5.5.1+dfsg-14ubuntu1

5.5.1+dfsg-14ubuntu2

5.5.1+dfsg-14ubuntu3

5.5.1+dfsg-15ubuntu1

5.5.1+dfsg-16ubuntu1

5.5.1+dfsg-16ubuntu6

5.5.1+dfsg-16ubuntu7

5.5.1+dfsg-16ubuntu7.1

5.5.1+dfsg-16ubuntu7.2

5.5.1+dfsg-16ubuntu7.5

5.5.1+dfsg-16ubuntu7.6

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libqt5test5": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5widgets5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-doc-html": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5dbus5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-odbc": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5concurrent5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-private-dev-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5network5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-examples-dbg": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5opengl5-dev": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5xml5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-examples": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-sqlite": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-tds": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5gui5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5widgets5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-mysql-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5opengl5-dev-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5core5a": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-sqlite-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-qmake-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5libqgtk2-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dev": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5opengl5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dev-tools": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5printsupport5": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5xml5": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5dbus5": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-qmake-arm-linux-gnueabihf": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-psql-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-private-dev": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-default": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5libqgtk2": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dev-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5core5a-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-qmake": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-qmake-arm-linux-gnueabihf-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-psql": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dev-tools-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-examples-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5gui5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dbg": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5network5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5opengl5": "5.5.1+dfsg-16ubuntu7.7",
            "qtbase5-dev-tools-dbg": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5printsupport5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5test5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-mysql": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-odbc-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5concurrent5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "qt5-default-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-dbgsym": "5.5.1+dfsg-16ubuntu7.7",
            "libqt5sql5-tds-dbgsym": "5.5.1+dfsg-16ubuntu7.7"
        }
    ]
}

Ubuntu:18.04:LTS / qtbase-opensource-src

Package

Name: qtbase-opensource-src
Purl: pkg:deb/ubuntu/qtbase-opensource-src@5.9.5+dfsg-0ubuntu2.5?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.9.5+dfsg-0ubuntu2.5

Affected versions

5.*

5.9.1+dfsg-10ubuntu1

5.9.1+dfsg-10ubuntu2

5.9.2+dfsg-4ubuntu6

5.9.3+dfsg-0ubuntu1

5.9.3+dfsg-0ubuntu3

5.9.3+dfsg-0ubuntu4

5.9.4+dfsg-0ubuntu3

5.9.4+dfsg-0ubuntu4

5.9.5+dfsg-0ubuntu1

5.9.5+dfsg-0ubuntu2

5.9.5+dfsg-0ubuntu2.1

5.9.5+dfsg-0ubuntu2.3

5.9.5+dfsg-0ubuntu2.4

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "libqt5test5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5widgets5": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-doc-html": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5dbus5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-odbc": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5concurrent5": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-gtk-platformtheme-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5network5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5opengl5-dev": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-examples": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5xml5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-sqlite": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-tds": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5gui5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5widgets5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-mysql-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-dev-tools": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5core5a": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-sqlite-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-private-dev": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-default": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-dev": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5opengl5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-qmake-bin": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5printsupport5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5xml5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5dbus5": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-gtk-platformtheme": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-psql-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5core5a-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-ibase": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-ibase-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-psql": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-doc": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-examples-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-qmake": "5.9.5+dfsg-0ubuntu2.5",
            "qtbase5-dev-tools-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5gui5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5network5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5printsupport5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-tds-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5opengl5": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5test5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-mysql": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5concurrent5-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "libqt5sql5-odbc-dbgsym": "5.9.5+dfsg-0ubuntu2.5",
            "qt5-qmake-bin-dbgsym": "5.9.5+dfsg-0ubuntu2.5"
        }
    ]
}