CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access.

Score
7.3 high
Published
2020-09-14
Links
NVD · cve.org

Affected ports (3)

PortPackageVersionStatusMaintainer
devel/linux-c7-qtlinux-c7-qt4.8.7_5unaddressedemulation@FreeBSD.org
misc/qt5-docqt5-doc5.12.2unaddressedkde@FreeBSD.org
x11-toolkits/linux-c7-qt-x11linux-c7-qt-x114.8.7_5unaddressedemulation@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>linux-c7-qt</name>
	<range><lt>5.9.10</lt></range>
      </package>
      <package>
	<name>qt5-doc</name>
	<range><lt>5.9.10</lt></range>
      </package>
      <package>
	<name>linux-c7-qt-x11</name>
	<range><lt>5.9.10</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and
	5.9.10 may allow an authenticated user to potentially enable elevation
	of privilege via local access.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2020-0570</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2020-0570</url>
    </references>
    <dates>
      <discovery>2020-09-14</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>