SUSE update for qt6-base

1) Cleartext transmission of sensitive information

EUVDB-ID: #VU76666

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-32762

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. A remote attacker with ability to intercept network traffic can gain access to sensitive data.

Mitigation

Update the affected package qt6-base to the latest version.

Vulnerable software versions

SUSE Package Hub 15: 15-SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Linux Enterprise Desktop 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

qt6-base-private-devel: before 6.2.2-150400.4.6.1

qt6-docs-common: before 6.2.2-150400.4.6.1

qt6-sql-mysql: before 6.2.2-150400.4.6.1

qt6-base-examples-debuginfo: before 6.2.2-150400.4.6.1

qt6-dbus-private-devel: before 6.2.2-150400.4.6.1

qt6-platformsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-base-docs-html: before 6.2.2-150400.4.6.1

qt6-sql-postgresql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-postgresql: before 6.2.2-150400.4.6.1

qt6-base-examples: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3: before 6.2.2-150400.4.6.1

qt6-sql-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm-debuginfo: before 6.2.2-150400.4.6.1

qt6-base-docs-qch: before 6.2.2-150400.4.6.1

qt6-sql-mysql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC: before 6.2.2-150400.4.6.1

qt6-printsupport-cups-debuginfo: before 6.2.2-150400.4.6.1

qt6-test-private-devel: before 6.2.2-150400.4.6.1

qt6-network-private-devel: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3-debuginfo: before 6.2.2-150400.4.6.1

qt6-xml-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-cups: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm: before 6.2.2-150400.4.6.1

qt6-base-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-devel: before 6.2.2-150400.4.6.1

libQt6Test6-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-private-devel: before 6.2.2-150400.4.6.1

qt6-base-debugsource: before 6.2.2-150400.4.6.1

libQt6Widgets6: before 6.2.2-150400.4.6.1

libQt6Widgets6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls: before 6.2.2-150400.4.6.1

qt6-test-devel: before 6.2.2-150400.4.6.1

qt6-gui-devel: before 6.2.2-150400.4.6.1

qt6-base-debuginfo: before 6.2.2-150400.4.6.1

qt6-kmssupport-devel-static: before 6.2.2-150400.4.6.1

qt6-opengl-private-devel: before 6.2.2-150400.4.6.1

libQt6DBus6: before 6.2.2-150400.4.6.1

libQt6DBus6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-devel: before 6.2.2-150400.4.6.1

qt6-xml-devel: before 6.2.2-150400.4.6.1

qt6-base-common-devel: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6: before 6.2.2-150400.4.6.1

qt6-base-common-devel-debuginfo: before 6.2.2-150400.4.6.1

libQt6OpenGL6: before 6.2.2-150400.4.6.1

libQt6Xml6-debuginfo: before 6.2.2-150400.4.6.1

qt6-concurrent-devel: before 6.2.2-150400.4.6.1

libQt6Sql6: before 6.2.2-150400.4.6.1

libQt6Xml6: before 6.2.2-150400.4.6.1

libQt6OpenGL6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Network6: before 6.2.2-150400.4.6.1

qt6-opengl-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-devel: before 6.2.2-150400.4.6.1

qt6-gui-private-devel: before 6.2.2-150400.4.6.1

libQt6Gui6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Core6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6: before 6.2.2-150400.4.6.1

qt6-dbus-devel: before 6.2.2-150400.4.6.1

libQt6Sql6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite: before 6.2.2-150400.4.6.1

qt6-core-devel: before 6.2.2-150400.4.6.1

libQt6Network6-debuginfo: before 6.2.2-150400.4.6.1

qt6-platformsupport-devel-static: before 6.2.2-150400.4.6.1

qt6-openglwidgets-devel: before 6.2.2-150400.4.6.1

qt6-network-devel: before 6.2.2-150400.4.6.1

qt6-core-private-devel: before 6.2.2-150400.4.6.1

qt6-kmssupport-private-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Test6: before 6.2.2-150400.4.6.1

libQt6Core6: before 6.2.2-150400.4.6.1

libQt6Gui6: before 6.2.2-150400.4.6.1

CPE2.3

• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:qt6-base-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-docs-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-qch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-concurrent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-openglwidgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU76668

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-32763

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing SVG files within the QTextLayout() function in src/gui/text/qtextlayout.cpp. A remote attacker can pass a specially crafted SVG file to the application, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected package qt6-base to the latest version.

Vulnerable software versions

SUSE Package Hub 15: 15-SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Linux Enterprise Desktop 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

qt6-base-private-devel: before 6.2.2-150400.4.6.1

qt6-docs-common: before 6.2.2-150400.4.6.1

qt6-sql-mysql: before 6.2.2-150400.4.6.1

qt6-base-examples-debuginfo: before 6.2.2-150400.4.6.1

qt6-dbus-private-devel: before 6.2.2-150400.4.6.1

qt6-platformsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-base-docs-html: before 6.2.2-150400.4.6.1

qt6-sql-postgresql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-postgresql: before 6.2.2-150400.4.6.1

qt6-base-examples: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3: before 6.2.2-150400.4.6.1

qt6-sql-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm-debuginfo: before 6.2.2-150400.4.6.1

qt6-base-docs-qch: before 6.2.2-150400.4.6.1

qt6-sql-mysql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC: before 6.2.2-150400.4.6.1

qt6-printsupport-cups-debuginfo: before 6.2.2-150400.4.6.1

qt6-test-private-devel: before 6.2.2-150400.4.6.1

qt6-network-private-devel: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3-debuginfo: before 6.2.2-150400.4.6.1

qt6-xml-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-cups: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm: before 6.2.2-150400.4.6.1

qt6-base-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-devel: before 6.2.2-150400.4.6.1

libQt6Test6-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-private-devel: before 6.2.2-150400.4.6.1

qt6-base-debugsource: before 6.2.2-150400.4.6.1

libQt6Widgets6: before 6.2.2-150400.4.6.1

libQt6Widgets6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls: before 6.2.2-150400.4.6.1

qt6-test-devel: before 6.2.2-150400.4.6.1

qt6-gui-devel: before 6.2.2-150400.4.6.1

qt6-base-debuginfo: before 6.2.2-150400.4.6.1

qt6-kmssupport-devel-static: before 6.2.2-150400.4.6.1

qt6-opengl-private-devel: before 6.2.2-150400.4.6.1

libQt6DBus6: before 6.2.2-150400.4.6.1

libQt6DBus6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-devel: before 6.2.2-150400.4.6.1

qt6-xml-devel: before 6.2.2-150400.4.6.1

qt6-base-common-devel: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6: before 6.2.2-150400.4.6.1

qt6-base-common-devel-debuginfo: before 6.2.2-150400.4.6.1

libQt6OpenGL6: before 6.2.2-150400.4.6.1

libQt6Xml6-debuginfo: before 6.2.2-150400.4.6.1

qt6-concurrent-devel: before 6.2.2-150400.4.6.1

libQt6Sql6: before 6.2.2-150400.4.6.1

libQt6Xml6: before 6.2.2-150400.4.6.1

libQt6OpenGL6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Network6: before 6.2.2-150400.4.6.1

qt6-opengl-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-devel: before 6.2.2-150400.4.6.1

qt6-gui-private-devel: before 6.2.2-150400.4.6.1

libQt6Gui6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Core6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6: before 6.2.2-150400.4.6.1

qt6-dbus-devel: before 6.2.2-150400.4.6.1

libQt6Sql6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite: before 6.2.2-150400.4.6.1

qt6-core-devel: before 6.2.2-150400.4.6.1

libQt6Network6-debuginfo: before 6.2.2-150400.4.6.1

qt6-platformsupport-devel-static: before 6.2.2-150400.4.6.1

qt6-openglwidgets-devel: before 6.2.2-150400.4.6.1

qt6-network-devel: before 6.2.2-150400.4.6.1

qt6-core-private-devel: before 6.2.2-150400.4.6.1

qt6-kmssupport-private-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Test6: before 6.2.2-150400.4.6.1

libQt6Core6: before 6.2.2-150400.4.6.1

libQt6Gui6: before 6.2.2-150400.4.6.1

CPE2.3

• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:qt6-base-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-docs-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-qch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-concurrent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-openglwidgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU76667

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-33285

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to buffer over-read via a crafted reply from a DNS server within the QDnsLookup() function in src/network/kernel/qdnslookup_unix.cpp. A remote attacker can perform a denial of service attack.

Mitigation

Update the affected package qt6-base to the latest version.

Vulnerable software versions

SUSE Package Hub 15: 15-SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Linux Enterprise Desktop 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

qt6-base-private-devel: before 6.2.2-150400.4.6.1

qt6-docs-common: before 6.2.2-150400.4.6.1

qt6-sql-mysql: before 6.2.2-150400.4.6.1

qt6-base-examples-debuginfo: before 6.2.2-150400.4.6.1

qt6-dbus-private-devel: before 6.2.2-150400.4.6.1

qt6-platformsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-base-docs-html: before 6.2.2-150400.4.6.1

qt6-sql-postgresql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-postgresql: before 6.2.2-150400.4.6.1

qt6-base-examples: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3: before 6.2.2-150400.4.6.1

qt6-sql-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm-debuginfo: before 6.2.2-150400.4.6.1

qt6-base-docs-qch: before 6.2.2-150400.4.6.1

qt6-sql-mysql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC: before 6.2.2-150400.4.6.1

qt6-printsupport-cups-debuginfo: before 6.2.2-150400.4.6.1

qt6-test-private-devel: before 6.2.2-150400.4.6.1

qt6-network-private-devel: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3-debuginfo: before 6.2.2-150400.4.6.1

qt6-xml-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-cups: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm: before 6.2.2-150400.4.6.1

qt6-base-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-devel: before 6.2.2-150400.4.6.1

libQt6Test6-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-private-devel: before 6.2.2-150400.4.6.1

qt6-base-debugsource: before 6.2.2-150400.4.6.1

libQt6Widgets6: before 6.2.2-150400.4.6.1

libQt6Widgets6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls: before 6.2.2-150400.4.6.1

qt6-test-devel: before 6.2.2-150400.4.6.1

qt6-gui-devel: before 6.2.2-150400.4.6.1

qt6-base-debuginfo: before 6.2.2-150400.4.6.1

qt6-kmssupport-devel-static: before 6.2.2-150400.4.6.1

qt6-opengl-private-devel: before 6.2.2-150400.4.6.1

libQt6DBus6: before 6.2.2-150400.4.6.1

libQt6DBus6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-devel: before 6.2.2-150400.4.6.1

qt6-xml-devel: before 6.2.2-150400.4.6.1

qt6-base-common-devel: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6: before 6.2.2-150400.4.6.1

qt6-base-common-devel-debuginfo: before 6.2.2-150400.4.6.1

libQt6OpenGL6: before 6.2.2-150400.4.6.1

libQt6Xml6-debuginfo: before 6.2.2-150400.4.6.1

qt6-concurrent-devel: before 6.2.2-150400.4.6.1

libQt6Sql6: before 6.2.2-150400.4.6.1

libQt6Xml6: before 6.2.2-150400.4.6.1

libQt6OpenGL6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Network6: before 6.2.2-150400.4.6.1

qt6-opengl-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-devel: before 6.2.2-150400.4.6.1

qt6-gui-private-devel: before 6.2.2-150400.4.6.1

libQt6Gui6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Core6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6: before 6.2.2-150400.4.6.1

qt6-dbus-devel: before 6.2.2-150400.4.6.1

libQt6Sql6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite: before 6.2.2-150400.4.6.1

qt6-core-devel: before 6.2.2-150400.4.6.1

libQt6Network6-debuginfo: before 6.2.2-150400.4.6.1

qt6-platformsupport-devel-static: before 6.2.2-150400.4.6.1

qt6-openglwidgets-devel: before 6.2.2-150400.4.6.1

qt6-network-devel: before 6.2.2-150400.4.6.1

qt6-core-private-devel: before 6.2.2-150400.4.6.1

qt6-kmssupport-private-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Test6: before 6.2.2-150400.4.6.1

libQt6Core6: before 6.2.2-150400.4.6.1

libQt6Gui6: before 6.2.2-150400.4.6.1

CPE2.3

• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:qt6-base-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-docs-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-qch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-concurrent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-openglwidgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Improper Certificate Validation

EUVDB-ID: #VU78696

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-34410

CWE-ID: CWE-295 - Improper Certificate Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to improper validation of TLS certificate chain, where application does not always consider whether the root of a chain is a configured CA certificate. A remote attacker can perform MitM attack.

Mitigation

Update the affected package qt6-base to the latest version.

Vulnerable software versions

SUSE Package Hub 15: 15-SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Linux Enterprise Desktop 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

qt6-base-private-devel: before 6.2.2-150400.4.6.1

qt6-docs-common: before 6.2.2-150400.4.6.1

qt6-sql-mysql: before 6.2.2-150400.4.6.1

qt6-base-examples-debuginfo: before 6.2.2-150400.4.6.1

qt6-dbus-private-devel: before 6.2.2-150400.4.6.1

qt6-platformsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-base-docs-html: before 6.2.2-150400.4.6.1

qt6-sql-postgresql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-postgresql: before 6.2.2-150400.4.6.1

qt6-base-examples: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3: before 6.2.2-150400.4.6.1

qt6-sql-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm-debuginfo: before 6.2.2-150400.4.6.1

qt6-base-docs-qch: before 6.2.2-150400.4.6.1

qt6-sql-mysql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC: before 6.2.2-150400.4.6.1

qt6-printsupport-cups-debuginfo: before 6.2.2-150400.4.6.1

qt6-test-private-devel: before 6.2.2-150400.4.6.1

qt6-network-private-devel: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3-debuginfo: before 6.2.2-150400.4.6.1

qt6-xml-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-cups: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm: before 6.2.2-150400.4.6.1

qt6-base-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-devel: before 6.2.2-150400.4.6.1

libQt6Test6-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-private-devel: before 6.2.2-150400.4.6.1

qt6-base-debugsource: before 6.2.2-150400.4.6.1

libQt6Widgets6: before 6.2.2-150400.4.6.1

libQt6Widgets6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls: before 6.2.2-150400.4.6.1

qt6-test-devel: before 6.2.2-150400.4.6.1

qt6-gui-devel: before 6.2.2-150400.4.6.1

qt6-base-debuginfo: before 6.2.2-150400.4.6.1

qt6-kmssupport-devel-static: before 6.2.2-150400.4.6.1

qt6-opengl-private-devel: before 6.2.2-150400.4.6.1

libQt6DBus6: before 6.2.2-150400.4.6.1

libQt6DBus6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-devel: before 6.2.2-150400.4.6.1

qt6-xml-devel: before 6.2.2-150400.4.6.1

qt6-base-common-devel: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6: before 6.2.2-150400.4.6.1

qt6-base-common-devel-debuginfo: before 6.2.2-150400.4.6.1

libQt6OpenGL6: before 6.2.2-150400.4.6.1

libQt6Xml6-debuginfo: before 6.2.2-150400.4.6.1

qt6-concurrent-devel: before 6.2.2-150400.4.6.1

libQt6Sql6: before 6.2.2-150400.4.6.1

libQt6Xml6: before 6.2.2-150400.4.6.1

libQt6OpenGL6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Network6: before 6.2.2-150400.4.6.1

qt6-opengl-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-devel: before 6.2.2-150400.4.6.1

qt6-gui-private-devel: before 6.2.2-150400.4.6.1

libQt6Gui6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Core6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6: before 6.2.2-150400.4.6.1

qt6-dbus-devel: before 6.2.2-150400.4.6.1

libQt6Sql6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite: before 6.2.2-150400.4.6.1

qt6-core-devel: before 6.2.2-150400.4.6.1

libQt6Network6-debuginfo: before 6.2.2-150400.4.6.1

qt6-platformsupport-devel-static: before 6.2.2-150400.4.6.1

qt6-openglwidgets-devel: before 6.2.2-150400.4.6.1

qt6-network-devel: before 6.2.2-150400.4.6.1

qt6-core-private-devel: before 6.2.2-150400.4.6.1

qt6-kmssupport-private-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Test6: before 6.2.2-150400.4.6.1

libQt6Core6: before 6.2.2-150400.4.6.1

libQt6Gui6: before 6.2.2-150400.4.6.1

CPE2.3

• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:qt6-base-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-docs-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-qch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-concurrent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-openglwidgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Infinite loop

EUVDB-ID: #VU78697

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-38197

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop when handling recursive expansions. A remote attacker can consume all available system resources and cause denial of service conditions.

Mitigation

Update the affected package qt6-base to the latest version.

Vulnerable software versions

SUSE Package Hub 15: 15-SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Linux Enterprise Desktop 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

qt6-base-private-devel: before 6.2.2-150400.4.6.1

qt6-docs-common: before 6.2.2-150400.4.6.1

qt6-sql-mysql: before 6.2.2-150400.4.6.1

qt6-base-examples-debuginfo: before 6.2.2-150400.4.6.1

qt6-dbus-private-devel: before 6.2.2-150400.4.6.1

qt6-platformsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-base-docs-html: before 6.2.2-150400.4.6.1

qt6-sql-postgresql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-postgresql: before 6.2.2-150400.4.6.1

qt6-base-examples: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3: before 6.2.2-150400.4.6.1

qt6-sql-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-private-devel: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm-debuginfo: before 6.2.2-150400.4.6.1

qt6-base-docs-qch: before 6.2.2-150400.4.6.1

qt6-sql-mysql-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-unixODBC: before 6.2.2-150400.4.6.1

qt6-printsupport-cups-debuginfo: before 6.2.2-150400.4.6.1

qt6-test-private-devel: before 6.2.2-150400.4.6.1

qt6-network-private-devel: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal: before 6.2.2-150400.4.6.1

qt6-platformtheme-gtk3-debuginfo: before 6.2.2-150400.4.6.1

qt6-xml-private-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-cups: before 6.2.2-150400.4.6.1

qt6-platformtheme-xdgdesktopportal-debuginfo: before 6.2.2-150400.4.6.1

qt6-networkinformation-nm: before 6.2.2-150400.4.6.1

qt6-base-devel: before 6.2.2-150400.4.6.1

qt6-printsupport-devel: before 6.2.2-150400.4.6.1

libQt6Test6-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-private-devel: before 6.2.2-150400.4.6.1

qt6-base-debugsource: before 6.2.2-150400.4.6.1

libQt6Widgets6: before 6.2.2-150400.4.6.1

libQt6Widgets6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls: before 6.2.2-150400.4.6.1

qt6-test-devel: before 6.2.2-150400.4.6.1

qt6-gui-devel: before 6.2.2-150400.4.6.1

qt6-base-debuginfo: before 6.2.2-150400.4.6.1

qt6-kmssupport-devel-static: before 6.2.2-150400.4.6.1

qt6-opengl-private-devel: before 6.2.2-150400.4.6.1

libQt6DBus6: before 6.2.2-150400.4.6.1

libQt6DBus6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-devel: before 6.2.2-150400.4.6.1

qt6-xml-devel: before 6.2.2-150400.4.6.1

qt6-base-common-devel: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6: before 6.2.2-150400.4.6.1

qt6-base-common-devel-debuginfo: before 6.2.2-150400.4.6.1

libQt6OpenGL6: before 6.2.2-150400.4.6.1

libQt6Xml6-debuginfo: before 6.2.2-150400.4.6.1

qt6-concurrent-devel: before 6.2.2-150400.4.6.1

libQt6Sql6: before 6.2.2-150400.4.6.1

libQt6Xml6: before 6.2.2-150400.4.6.1

libQt6OpenGL6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Network6: before 6.2.2-150400.4.6.1

qt6-opengl-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6-debuginfo: before 6.2.2-150400.4.6.1

qt6-network-tls-debuginfo: before 6.2.2-150400.4.6.1

qt6-widgets-devel: before 6.2.2-150400.4.6.1

qt6-gui-private-devel: before 6.2.2-150400.4.6.1

libQt6Gui6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Core6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Concurrent6: before 6.2.2-150400.4.6.1

qt6-dbus-devel: before 6.2.2-150400.4.6.1

libQt6Sql6-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite-debuginfo: before 6.2.2-150400.4.6.1

qt6-sql-sqlite: before 6.2.2-150400.4.6.1

qt6-core-devel: before 6.2.2-150400.4.6.1

libQt6Network6-debuginfo: before 6.2.2-150400.4.6.1

qt6-platformsupport-devel-static: before 6.2.2-150400.4.6.1

qt6-openglwidgets-devel: before 6.2.2-150400.4.6.1

qt6-network-devel: before 6.2.2-150400.4.6.1

qt6-core-private-devel: before 6.2.2-150400.4.6.1

qt6-kmssupport-private-devel: before 6.2.2-150400.4.6.1

libQt6PrintSupport6: before 6.2.2-150400.4.6.1

libQt6OpenGLWidgets6-debuginfo: before 6.2.2-150400.4.6.1

libQt6Test6: before 6.2.2-150400.4.6.1

libQt6Core6: before 6.2.2-150400.4.6.1

libQt6Gui6: before 6.2.2-150400.4.6.1

CPE2.3

• cpe:2.3:o:suse:suse_package_hub_15:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:qt6-base-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-docs-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-postgresql:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-examples:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-docs-qch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-mysql-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-unixodbc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-gtk3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-cups:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformtheme-xdgdesktopportal-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-networkinformation-nm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-printsupport-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6widgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-test-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6dbus6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-xml-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-base-common-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-concurrent-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6xml6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6opengl6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-opengl-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-tls-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-widgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-gui-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6concurrent6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-dbus-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6sql6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-sql-sqlite:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6network6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-platformsupport-devel-static:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-openglwidgets-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-network-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-core-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:qt6-kmssupport-private-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6printsupport6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6openglwidgets6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6test6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6core6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libqt6gui6:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.