QtNetwork -- potential buffer overflowentered 2024-01-07
no CVE referenced
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
no CVE referenced
Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.
<vuln vid="FIXME (make newentry)">
<topic>FIXME -- FIXME</topic>
<affects>
<package>
<name>linux-rl9-qt5-qtconnectivity</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtsensors</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtserialbus</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtserialport</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtbase</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtscript</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qttools</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qt3d</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtgraphicaleffects</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtimageformats</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtsvg</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtwayland</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>qt5-doc</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtmultimedia</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtxmlpatterns</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtwebchannel</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtwebsockets</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtdeclarative</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtquickcontrols</name>
<range><lt>5.15.17</lt></range>
</package>
<package>
<name>linux-rl9-qt5-qtx11extras</name>
<range><lt>5.15.17</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>An issue was discovered in the HTTP2 implementation in Qt before
5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and
6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an
incorrect HPack integer overflow check.</p>
</body>
</description>
<references>
<cvename>CVE-2023-51714</cvename>
<url>https://nvd.nist.gov/vuln/detail/CVE-2023-51714</url>
</references>
<dates>
<discovery>2023-12-24</discovery>
<entry>2026-10-25</entry>
</dates>
</vuln>