SUSE update for libqt5-qt3d
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2024-40724 |
| CWE-ID | CWE-122 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 SP3 LTSS Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 SP2 LTSS Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing LTSS 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS Operating systems & Components / Operating system SUSE Enterprise Storage Operating systems & Components / Operating system libqt5-qt3d-private-headers-devel Operating systems & Components / Operating system package or component libQt53DQuickExtras5 Operating systems & Components / Operating system package or component libQt53DQuickAnimation-devel Operating systems & Components / Operating system package or component libQt53DRender-devel Operating systems & Components / Operating system package or component libQt53DInput5 Operating systems & Components / Operating system package or component libQt53DQuick5 Operating systems & Components / Operating system package or component libqt5-qt3d-devel Operating systems & Components / Operating system package or component libQt53DAnimation5 Operating systems & Components / Operating system package or component libQt53DExtras-devel Operating systems & Components / Operating system package or component libQt53DQuickExtras-devel Operating systems & Components / Operating system package or component libqt5-qt3d-tools-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickScene2D5-debuginfo Operating systems & Components / Operating system package or component libQt53DRender5 Operating systems & Components / Operating system package or component libQt53DQuickScene2D5 Operating systems & Components / Operating system package or component libQt53DLogic-devel Operating systems & Components / Operating system package or component libQt53DQuickRender5 Operating systems & Components / Operating system package or component libQt53DQuick-devel Operating systems & Components / Operating system package or component libQt53DQuickInput5 Operating systems & Components / Operating system package or component libQt53DQuickRender-devel Operating systems & Components / Operating system package or component libqt5-qt3d-tools Operating systems & Components / Operating system package or component libQt53DInput5-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickAnimation5 Operating systems & Components / Operating system package or component libqt5-qt3d-debugsource Operating systems & Components / Operating system package or component libQt53DQuick5-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickAnimation5-debuginfo Operating systems & Components / Operating system package or component libQt53DInput-devel Operating systems & Components / Operating system package or component libqt5-qt3d-imports Operating systems & Components / Operating system package or component libQt53DCore-devel Operating systems & Components / Operating system package or component libQt53DLogic5 Operating systems & Components / Operating system package or component libQt53DRender5-debuginfo Operating systems & Components / Operating system package or component libQt53DExtras5-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickScene2D-devel Operating systems & Components / Operating system package or component libQt53DLogic5-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickRender5-debuginfo Operating systems & Components / Operating system package or component libQt53DExtras5 Operating systems & Components / Operating system package or component libqt5-qt3d-imports-debuginfo Operating systems & Components / Operating system package or component libQt53DAnimation-devel Operating systems & Components / Operating system package or component libQt53DQuickInput5-debuginfo Operating systems & Components / Operating system package or component libQt53DQuickInput-devel Operating systems & Components / Operating system package or component libQt53DQuickExtras5-debuginfo Operating systems & Components / Operating system package or component libQt53DCore5 Operating systems & Components / Operating system package or component libQt53DAnimation5-debuginfo Operating systems & Components / Operating system package or component libQt53DCore5-debuginfo Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains one high risk vulnerability.
1) Heap-based buffer overflow
EUVDB-ID: #VU94525
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-40724
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error. A remote attacker can use a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationUpdate the affected package libqt5-qt3d to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP2 - SP3
SUSE Linux Enterprise Server 15 SP3 LTSS: 15-SP3
SUSE Linux Enterprise Server 15: SP2 - SP3
SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise High Performance Computing LTSS 15: SP3
SUSE Linux Enterprise High Performance Computing 15: SP2 - SP3
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2
SUSE Enterprise Storage: 7.1
libqt5-qt3d-private-headers-devel: before 5.12.7-150200.4.3.1
libQt53DQuickExtras5: before 5.12.7-150200.4.3.1
libQt53DQuickAnimation-devel: before 5.12.7-150200.4.3.1
libQt53DRender-devel: before 5.12.7-150200.4.3.1
libQt53DInput5: before 5.12.7-150200.4.3.1
libQt53DQuick5: before 5.12.7-150200.4.3.1
libqt5-qt3d-devel: before 5.12.7-150200.4.3.1
libQt53DAnimation5: before 5.12.7-150200.4.3.1
libQt53DExtras-devel: before 5.12.7-150200.4.3.1
libQt53DQuickExtras-devel: before 5.12.7-150200.4.3.1
libqt5-qt3d-tools-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickScene2D5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DRender5: before 5.12.7-150200.4.3.1
libQt53DQuickScene2D5: before 5.12.7-150200.4.3.1
libQt53DLogic-devel: before 5.12.7-150200.4.3.1
libQt53DQuickRender5: before 5.12.7-150200.4.3.1
libQt53DQuick-devel: before 5.12.7-150200.4.3.1
libQt53DQuickInput5: before 5.12.7-150200.4.3.1
libQt53DQuickRender-devel: before 5.12.7-150200.4.3.1
libqt5-qt3d-tools: before 5.12.7-150200.4.3.1
libQt53DInput5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickAnimation5: before 5.12.7-150200.4.3.1
libqt5-qt3d-debugsource: before 5.12.7-150200.4.3.1
libQt53DQuick5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickAnimation5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DInput-devel: before 5.12.7-150200.4.3.1
libqt5-qt3d-imports: before 5.12.7-150200.4.3.1
libQt53DCore-devel: before 5.12.7-150200.4.3.1
libQt53DLogic5: before 5.12.7-150200.4.3.1
libQt53DRender5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DExtras5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickScene2D-devel: before 5.12.7-150200.4.3.1
libQt53DLogic5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickRender5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DExtras5: before 5.12.7-150200.4.3.1
libqt5-qt3d-imports-debuginfo: before 5.12.7-150200.4.3.1
libQt53DAnimation-devel: before 5.12.7-150200.4.3.1
libQt53DQuickInput5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DQuickInput-devel: before 5.12.7-150200.4.3.1
libQt53DQuickExtras5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DCore5: before 5.12.7-150200.4.3.1
libQt53DAnimation5-debuginfo: before 5.12.7-150200.4.3.1
libQt53DCore5-debuginfo: before 5.12.7-150200.4.3.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp3_ltss:15-SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_enterprise_storage:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:suse:libqt5-qt3d-private-headers-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickextras5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickanimation-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53drender-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dinput5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquick5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53danimation5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dextras-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickextras-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickscene2d5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53drender5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickscene2d5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dlogic-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickrender5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquick-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickinput5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickrender-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-tools:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dinput5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickanimation5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquick5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickanimation5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dinput-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-imports:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dcore-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dlogic5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53drender5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dextras5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickscene2d-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dlogic5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickrender5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dextras5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt5-qt3d-imports-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53danimation-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickinput5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickinput-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dquickextras5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dcore5:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53danimation5-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:o:suse:libqt53dcore5-debuginfo:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20242975-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
