Red Hat Enterprise Linux 8 update for qt5

1) Out-of-bounds read

EUVDB-ID: #VU66866

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-3481

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information or crash the application.

The vulnerability exists due to a boundary condition within the QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase when rendering and displaying a crafted Scalable Vector Graphics (SVG) file. A remote attacker can create a specially crafted SVG file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system or crash the application.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat CodeReady Linux Builder for IBM z Systems: 8.0

Red Hat CodeReady Linux Builder for ARM 64: 8.0

Red Hat CodeReady Linux Builder for Power, little endian: 8.0

Red Hat CodeReady Linux Builder for x86_64: 8.0

Red Hat Enterprise Linux for ARM 64: 8

Red Hat Enterprise Linux for Power, little endian: 8

Red Hat Enterprise Linux for IBM z Systems: 8

Red Hat Enterprise Linux for x86_64: 8.0

sip (Red Hat package): before 4.19.24-2.el8

qt5-qtxmlpatterns (Red Hat package): before 5.15.2-2.el8

qt5-qtx11extras (Red Hat package): before 5.15.2-2.el8

qt5-qtwebsockets (Red Hat package): before 5.15.2-2.el8

qt5-qtwebchannel (Red Hat package): before 5.15.2-2.el8

qt5-qtwayland (Red Hat package): before 5.15.2-2.el8

qt5-qttranslations (Red Hat package): before 5.15.2-1.el8

qt5-qttools (Red Hat package): before 5.15.2-3.el8

qt5-qtsvg (Red Hat package): before 5.15.2-3.el8

qt5-qtserialport (Red Hat package): before 5.15.2-2.el8

qt5-qtserialbus (Red Hat package): before 5.15.2-3.el8

qt5-qtsensors (Red Hat package): before 5.15.2-2.el8

qt5-qtscript (Red Hat package): before 5.15.2-2.el8

qt5-qtquickcontrols2 (Red Hat package): before 5.15.2-2.el8

qt5-qtquickcontrols (Red Hat package): before 5.15.2-2.el8

qt5-qtmultimedia (Red Hat package): before 5.15.2-2.el8

qt5-qtlocation (Red Hat package): before 5.15.2-2.el8

qt5-qtimageformats (Red Hat package): before 5.15.2-2.el8

qt5-qtgraphicaleffects (Red Hat package): before 5.15.2-2.el8

qt5-qtdoc (Red Hat package): before 5.15.2-1.el8

qt5-qtdeclarative (Red Hat package): before 5.15.2-2.el8

qt5-qtconnectivity (Red Hat package): before 5.15.2-2.el8

qt5-qtcanvas3d (Red Hat package): before 5.12.5-3.el8

qt5-qtbase (Red Hat package): before 5.15.2-3.el8

qt5-qt3d (Red Hat package): before 5.15.2-2.el8

qt5 (Red Hat package): before 5.15.2-1.el8

qgnomeplatform (Red Hat package): before 0.7.1-2.el8

python-qt5 (Red Hat package): before 5.15.0-2.el8

adwaita-qt (Red Hat package): before 1.2.1-3.el8

CPE2.3

• cpe:2.3:o:red_hat:red_hat_codeready_linux_builder_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:red_hat:red_hat_codeready_linux_builder_for_arm_64:8.0:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_codeready_linux_builder_for_x86_64:8.0:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_arm_64:8:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_power_little_endian:8:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_ibm_z_systems:8:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:red_hat_enterprise_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:red_hat:sip_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtxmlpatterns_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtx11extras_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtwebsockets_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtwebchannel_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtwayland_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qttranslations_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qttools_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtsvg_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtserialport_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtserialbus_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtsensors_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtscript_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtquickcontrols2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtquickcontrols_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtmultimedia_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtlocation_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtimageformats_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtgraphicaleffects_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtdoc_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtdeclarative_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtconnectivity_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtcanvas3d_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qtbase_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5-qt3d_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qt5_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:qgnomeplatform_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:python-qt5_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
• cpe:2.3:o:red_hat:adwaita-qt_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

External links

https://access.redhat.com/errata/RHSA-2021:4172

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.