Divide By Zero Affecting qt5-qttools-libs-help package, versions <0:5.12.5-1.el8
Threat Intelligence
EPSS
1.38% (72nd percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-ORACLE8-QT5QTTOOLSLIBSHELP-2555394
- published10 Apr 2022
- disclosed21 Mar 2019
Introduced: 21 Mar 2019
CVE-2018-19872 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade Oracle:8 qt5-qttools-libs-help to version 0:5.12.5-1.el8 or higher.
This issue was patched in ELSA-2020-1665.
NVD Description
Note: Versions mentioned in the description apply only to the upstream qt5-qttools-libs-help package and not the qt5-qttools-libs-help package as distributed by Oracle.
See How to fix? for Oracle:8 relevant fixed versions and status.
An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
References
- https://linux.oracle.com/cve/CVE-2018-19872.html
- https://linux.oracle.com/errata/ELSA-2020-1172.html
- https://linux.oracle.com/errata/ELSA-2020-1665.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/
- http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html
- https://bugreports.qt.io/browse/QTBUG-69449
- https://lists.debian.org/debian-lts-announce/2020/09/msg00023.html
- https://lists.debian.org/debian-lts-announce/2020/09/msg00024.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C5FHCR4A636BLTAXL76WWDJLOAHGNYG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FO7IBY7YYKNMRD5OI3JNNUI42WEM7NUV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XS6G3ZDFCHWFQD4CFXWFPHREOHBBDTD7/
- https://usn.ubuntu.com/4275-1/