Integer Overflow or Wraparound Affecting qt package, versions *


Severity

Recommended
medium

Based on CentOS security rating.

Threat Intelligence

EPSS
0.07% (35th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS6-QT-6139826
  • published26 Dec 2023
  • disclosed24 Dec 2023

Introduced: 24 Dec 2023

CVE-2023-51714  (opens in a new tab)
CWE-190  (opens in a new tab)

How to fix?

There is no fixed version for Centos:6 qt.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qt package and not the qt package as distributed by Centos. See How to fix? for Centos:6 relevant fixed versions and status.

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

CVSS Scores

version 3.1