The version of qt5-qtsvg installed on the remote host is prior to 5.9.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2242 advisory.

    2023-09-27: CVE-2021-3481 was added to this advisory.

    Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2,     allows local attackers to cause a denial of service (DoS). (CVE-2021-28025)

    A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality the application availability. (CVE-2021-3481)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2858:01 advisory.

    * qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (CVE-2021-3481)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3354-1 advisory.

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1371-1 advisory.

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5241-1 advisory.

    It was discovered that QtSvg incorrectly handled certain malformed SVG images. If a user or automated     system were tricked into opening a specially crafted image file, a remote attacker could use this issue to     cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4172 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4172 advisory.

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3333-1 advisory.

    - CVE-2021-3481: Fixed an out of bounds read in function QRadialFetchSimd from crafted svg file.
    (bsc#1184783)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2895 advisory.

  - Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in     QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and     QPathClipper::intersect). (CVE-2021-45930)

  - A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in     qt/qtbase/src/gui/painting/qdrawhelper_p.h in Qt/Qtbase. While rendering and displaying a crafted Scalable     Vector Graphics (SVG) file this flaw may lead to an unauthorized memory access. The highest threat from     this vulnerability is to data confidentiality and the application availability. (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
181163	Amazon Linux 2 : qt5-qtsvg (ALAS-2023-2242)	Nessus	Amazon Linux Local Security Checks	2023/9/8	2024/12/11	high
294267	MiracleLinux 8 : qt5 (AXSA:2021-2858:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
154064	openSUSE 15 Security Update : libqt5-qtsvg (openSUSE-SU-2021:3354-1)	Nessus	SuSE Local Security Checks	2021/10/13	2023/11/28	high
154209	openSUSE 15 Security Update : libqt5-qtsvg (openSUSE-SU-2021:1371-1)	Nessus	SuSE Local Security Checks	2021/10/19	2023/11/28	high
156880	Ubuntu 18.04 LTS : QtSvg vulnerabilities (USN-5241-1)	Nessus	Ubuntu Local Security Checks	2022/1/20	2024/8/28	high
157564	AlmaLinux 8 : qt5 (ALSA-2021:4172)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	high
184637	Rocky Linux 8 : qt5 (RLSA-2021:4172)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
154002	SUSE SLED12: libQt5Svg5 / libqt5-qtsvg-devel / etc (SUSE-SU-2021:3333-1)	Nessus	SuSE Local Security Checks	2021/10/12	2026/6/26	high
157047	Debian DLA-2895-1 : qt4-x11 - LTS security update	Nessus	Debian Local Security Checks	2022/1/24	2023/11/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high