CVE-2023-51714

תיאור (מקור, אנגלית)

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

מדדים

CVSS 3.1

9.8 (CRITICAL) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-14/10/2026

CWE

CWE-190

מוצרים מושפעים

debian: debian linux; qt: qt

קישורים

• https://codereview.qt-project.org/c/qt/qtbase/+/524864 PatchProduct
• https://codereview.qt-project.org/c/qt/qtbase/+/524865/3 PatchProduct
• https://codereview.qt-project.org/c/qt/qtbase/+/524864 PatchProduct
• https://codereview.qt-project.org/c/qt/qtbase/+/524865/3 PatchProduct
• https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html Mailing ListThird Party Advisory