VulnerableCode Package Details - pkg:deb/ubuntu/qtbase-opensource-src@5.12.5%2Bdfsg-4

Search for packages

Package details: pkg:deb/ubuntu/qtbase-opensource-src@5.12.5%2Bdfsg-4

Essentials
History (0)

purl	pkg:deb/ubuntu/qtbase-opensource-src@5.12.5%2Bdfsg-4

Next non-vulnerable version	5.12.8+dfsg-0ubuntu1
Latest non-vulnerable version	5.12.8+dfsg-0ubuntu1
Risk	3.5

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-1qkn-nzf8-aaaf Aliases: CVE-2015-9541	Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.	5.12.5+dfsg-9build1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-9m91-css2-aaad Aliases: CVE-2020-24742	An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.	5.12.8+dfsg-0ubuntu1 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version