Wind River Support Network

HomeDefectsLIN1021-5826

Fixed

LIN1021-5826 : Security Advisory - qtbase - CVE-2023-33285

Created: May 22, 2023 Updated: Aug 10, 2023

Resolved Date: Aug 10, 2023

Found In Version: 10.21.20.1

Fix Version: 10.21.20.19

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.

CREATE(Triage):(User=admin) CVE-2023-33285 (https://nvd.nist.gov/vuln/detail/CVE-2023-33285)

CVEs

CVE-2023-33285