AZL-33517

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-33517.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-33517

Upstream

CVE-2023-51714

Published

2023-12-24T21:15:25Z

Modified

2026-04-01T05:11:11.290030Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

CVE-2023-51714 affecting package qt5-qtbase for versions less than 5.12.11-10

Details

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-51714

Affected packages

Azure Linux:2 / qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:rpm/azure-linux/qt5-qtbase

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.12.11-10

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-33517.json"