Search for vulnerabilities
Vulnerability details: VCID-kzzz-63g5-aaas
Vulnerability ID VCID-kzzz-63g5-aaas
Aliases CVE-2023-33285
Summary An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-125 Out-of-bounds Read
CWE-400 Uncontrolled Resource Consumption
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33285.json
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00061 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00085 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00092 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.00406 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
epss 0.01378 https://api.first.org/data/v1/epss?cve=CVE-2023-33285
cvssv3.1 5.3 https://codereview.qt-project.org/c/qt/qtbase/+/477644
cvssv3.1 5.3 https://codereview.qt-project.org/c/qt/qtbase/+/477644
ssvc Track https://codereview.qt-project.org/c/qt/qtbase/+/477644
cvssv3.1 6.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.3 https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
ssvc Track https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
cvssv3 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-33285
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-33285
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33285.json
https://api.first.org/data/v1/epss?cve=CVE-2023-33285
https://codereview.qt-project.org/c/qt/qtbase/+/477644
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33285
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
1036848 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036848
2209488 https://bugzilla.redhat.com/show_bug.cgi?id=2209488
cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*
CVE-2023-33285 https://nvd.nist.gov/vuln/detail/CVE-2023-33285
RHSA-2023:6369 https://access.redhat.com/errata/RHSA-2023:6369
RHSA-2023:6967 https://access.redhat.com/errata/RHSA-2023:6967
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33285.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N Found at https://codereview.qt-project.org/c/qt/qtbase/+/477644
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N Found at https://codereview.qt-project.org/c/qt/qtbase/+/477644
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-21T15:17:38Z/ Found at https://codereview.qt-project.org/c/qt/qtbase/+/477644
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N Found at https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-01-21T15:17:38Z/ Found at https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2023-33285
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2023-33285
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.27151
EPSS Score 0.00061
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.