DEBIAN-CVE-2020-0570

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2020-0570
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0570.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2020-0570
Upstream
Published
2020-09-14T19:15:10.583Z
Modified
2025-11-14T03:02:32.251543Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

References

Affected packages

Debian:11 / qtbase-opensource-src

Package

Name
qtbase-opensource-src
Purl
pkg:deb/debian/qtbase-opensource-src?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.12.5+dfsg-8

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0570.json"

Debian:12 / qtbase-opensource-src

Package

Name
qtbase-opensource-src
Purl
pkg:deb/debian/qtbase-opensource-src?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.12.5+dfsg-8

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0570.json"

Debian:13 / qtbase-opensource-src

Package

Name
qtbase-opensource-src
Purl
pkg:deb/debian/qtbase-opensource-src?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.12.5+dfsg-8

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0570.json"

Debian:14 / qtbase-opensource-src

Package

Name
qtbase-opensource-src
Purl
pkg:deb/debian/qtbase-opensource-src?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.12.5+dfsg-8

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0570.json"