The remote host is affected by the vulnerability described in GLSA-201603-10 (QtGui: Multiple vulnerabilities)

    Multiple buffer overflow vulnerabilities have been discovered in QtGui.
      It is possible for remote attackers to construct specially crafted BMP,       ICO, or GIF images that lead to buffer overflows. After successfully       overflowing the buffer the remote attacker can then cause a Denial of       Service or execute arbitrary code.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause Denial       of Service.
  Workaround :

    There is no known work around at this time.

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - QXmlSimpleReader in Qt before 5.2 allows     context-dependent attackers to cause a denial of     service (memory consumption) via an XML Entity     Expansion (XEE) attack.(CVE-2013-4549)

  - An issue was discovered in Qt before 5.11.3. There is     QTgaFile Uncontrolled Resource     Consumption.(CVE-2018-19871)

  - QXmlStream in Qt 5.x before 5.11.3 has a double-free or     corruption during parsing of a specially crafted     illegal XML document.(CVE-2018-15518)

  - An issue was discovered in Qt 5.11. A malformed PPM     image causes a division by zero and a crash in     qppmhandler.cpp.(CVE-2018-19872)

  - Multiple buffer overflows in gui/image/qbmphandler.cpp     in the QtBase module in Qt before 4.8.7 and 5.x before     5.4.2 allow remote attackers to cause a denial of     service (segmentation fault and crash) and possibly     execute arbitrary code via a crafted BMP     image.(CVE-2015-1858)

  - Multiple buffer overflows in     plugins/imageformats/ico/qicohandler.cpp in the QtBase     module in Qt before 4.8.7 and 5.x before 5.4.2 allow     remote attackers to cause a denial of service     (segmentation fault and crash) and possibly execute     arbitrary code via a crafted ICO image.(CVE-2015-1859)

  - Multiple buffer overflows in gui/image/qgifhandler.cpp     in the QtBase module in Qt before 4.8.7 and 5.x before     5.4.2 allow remote attackers to cause a denial of     service (segmentation fault) and possibly execute     arbitrary code via a crafted GIF image.(CVE-2015-1860)

  - The BMP decoder in QtGui in QT before 5.5 does not     properly calculate the masks used to extract the color     components, which allows remote attackers to cause a     denial of service (divide-by-zero and crash) via a     crafted BMP file.(CVE-2015-0295)

  - The GIF decoder in QtGui in Qt before 5.3 allows remote     attackers to cause a denial of service (NULL pointer     dereference) via invalid width and height values in a     GIF image.(CVE-2014-0190)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Richard J. Moore 报告：

由于在内置图像格式处理代码中发现两个最新漏洞，经决定此区域需要进一步测试以确定是否仍有其他问题。Fuzzing 使用 afl-fuzz 在 BMP、ICO 和 GIF 文件的处理中发现许多问题。这些暴露的问题包括可导致堆损坏的拒绝服务和缓冲区溢出。这些问题之后还可能被用于远程代码执行。

此更新修复了 Qt 库中的多个安全问题。

CVE-2013-0254

QSharedMemory 类为共享内存段使用弱权限（全局可读和全局可写），这允许本地用户读取敏感信息或修改关键程序数据，这一点已通过读取发送到 X 服务器的 pixmap 证实。

CVE-2015-0295 / CVE-2015-1858 / CVE-2015-1859 / CVE-2015-1860

通过构建的图像（BMP、GIF、ICO）造成拒绝服务（通过分段错误）。

注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

此安全更新修复了以下问题：

- 添加 libqt5-Fix-a-division-by-zero-processing-malformed-BMP.patch

- QTBUG-44547，bsc#921999 (CVE-2015-0295)

- 添加 libqt5-Fixes-crash-in-bmp-and-ico-image-decoding.patch

- bsc#927806 (CVE-2015-1858)，bsc#927807 (CVE-2015-1859)

- 添加 libqt5-Fixes-crash-in-gif-image-decoder.patch

- bsc#927808 (CVE-2015-1860)

- 添加上游的 libqt5-fix-use-after-free-bug.patch

- 修复后备存储中的释放后使用缺陷，boo#870151

请注意，Tenable Network Security 已直接从 SUSE 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

Richard J. Moore 報告：

由於最近在內建影像格式處理程式碼中找到兩個弱點，因此決定這一部分需要進一步測試，以判定是否有其他問題。使用 afl-fuzz 的模糊測試在 BMP、ICO 和 GIF 檔的處理中找到數個問題。所找到的問題包括拒絕服務和緩衝區溢位，可能導致堆積損毀。後者可能遭到利用，進而執行遠端程式碼。

此安全性更新可修正下列問題：

- 新增 libqt5-Fix-a-division-by-zero-processing-malformed-BMP.patch

- QTBUG-44547、bsc#921999 (CVE-2015-0295)

- 新增 libqt5-Fixes-crash-in-bmp-and-ico-image-decoding.patch

- bsc#927806 (CVE-2015-1858)、bsc#927807 (CVE-2015-1859)

- 新增 libqt5-Fixes-crash-in-gif-image-decoder.patch

- bsc#927808 (CVE-2015-1860)

- 從上游新增 libqt5-fix-use-after-free-bug.patch

- 修正 backingstore 中的釋放後使用錯誤，boo#870151

請注意，Tenable Network Security 已直接從 SUSE 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

此更新可修正 Qt 程式庫中的多個安全性問題。

CVE-2013-0254

QSharedMemory 類別針對共用記憶體區段使用弱式權限 (任何人皆可讀取及任何人皆可寫入)，這會允許本機使用者讀取敏感資訊或修改重要程式資料，讀取傳送至 X 伺服器的 pixmap 即為一例。

CVE-2015-0295 / CVE-2015-1858 / CVE-2015-1859 / CVE-2015-1860

藉由特製影像 (BMP、GIF、ICO) 引發的拒絕服務 (透過分割錯誤)。

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
89903	GLSA-201603-10 : QtGui: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/3/14	2021/1/11	medium
131873	EulerOS 2.0 SP2 : qt (EulerOS-SA-2019-2381)	Nessus	Huawei Local Security Checks	2019/12/10	2024/4/4	high
82786	FreeBSD：qt4-imageformats、qt4-gui、qt5-gui -- Qt 图像格式处理中的多个漏洞 (5713bfda-e27d-11e4-b2ce-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	2015/4/15	2021/1/6	medium
83164	Debian DLA-210-1：qt4-x11 安全更新	Nessus	Debian Local Security Checks	2015/5/1	2021/1/11	medium
85504	SUSE SLED12 / SLES12 安全更新：libqt5-qtbase (SUSE-SU-2015:1383-1)	Nessus	SuSE Local Security Checks	2015/8/18	2021/1/6	medium
82786	FreeBSD：qt4-imageformats、qt4-gui、qt5-gui -- Qt 影像格式處理中的多個弱點 (5713bfda-e27d-11e4-b2ce-5453ed2e2b49)	Nessus	FreeBSD Local Security Checks	2015/4/15	2021/1/6	medium
85504	SUSE SLED12 / SLES12 安全性更新：libqt5-qtbase (SUSE-SU-2015:1383-1)	Nessus	SuSE Local Security Checks	2015/8/18	2021/1/6	medium
83164	Debian DLA-210-1：qt4-x11 安全性更新	Nessus	Debian Local Security Checks	2015/5/1	2021/1/11	medium

检测

插件搜索

medium

high

medium

medium

medium

medium

medium

medium