Every CVE Search/ Get API key

CVE-2023-24607

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin...

7.5 HighFix available

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.32%Up 1.3 points since Apr 15, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
CVE-2023-24607
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
CVE-2023-24607
Updated
2026-11-02
EUVDEUVD-2023-28622 No score

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
EUVD-2023-28622
Updated
2026-11-03
GitHub AdvisoriesGHSA-gfrv-8477-wf9f 7.5

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin...

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
GHSA-gfrv-8477-wf9f
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-26048 7.5

CVE-2023-24607 affecting package qt5-qtbase for versions less than 5.15.9-1

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
AZL-26048
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-24607 7.5

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
DEBIAN-CVE-2023-24607
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVOESA-2023-1270 7.8

qt5-qtbase security update

This package provides base tools, such as string, xml, and network handling.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

Record
OESA-2023-1270
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1295 7.8

qt5-qtbase security update

This package provides base tools, such as string, xml, and network handling.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

Record
OESA-2023-1295
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1296 7.8

qt5-qtbase security update

This package provides base tools, such as string, xml, and network handling.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

Record
OESA-2023-1296
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1489 7.5

qt5-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.(CVE-2023-32762)

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered.(CVE-2023-32763)

Record
OESA-2023-1489
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1490 7.5

qt5-qtbase security update

Qt is a software toolkit for developing applications.

Security Fix(es):

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.(CVE-2023-24607)

Record
OESA-2023-1490
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-24607 7.5

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
UBUNTU-CVE-2023-24607
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV No score

Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3.

Record
CVE-2023-24607
Updated
2026-11-02
OSVMGASA-2023-0051 No score

Updated qtbase5 packages fix security vulnerability

Avoid unintentionally using binaries from CWD (CVE-2022-23853) Fix a possible DOS involving the Qt SQL ODBC driver plugin (CVE-2023-24607) Also fixes a regression that prevented Akonadi from working with kmail

Record
MGASA-2023-0051
Updated
2026-11-02
OSVopenSUSE-SU-2024:12673-1 No score

libQt6Concurrent6-6.4.2-2.1 on GA media

These are all security issues fixed in the libQt6Concurrent6-6.4.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12673-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12801-1 No score

libQt5Bootstrap-devel-static-32bit-5.15.8+kde183-1.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.8+kde183-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12801-1
Updated
2026-11-02
OSVSUSE-SU-2023:1567-1 No score

Security update for qt6-base

qt6-base was updated to fix the following issue:

  • CVE-2023-24607: Fix a possible DOS in the Qt ODBC driver plugin.
Record
SUSE-SU-2023:1567-1
Updated
2026-11-02
OSVSUSE-SU-2023:2971-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
Record
SUSE-SU-2023:2971-1
Updated
2026-11-02
OSVSUSE-SU-2023:2982-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-32763: Fixed buffer overflow when rendering an SVG file with an image inside it (bsc#1211798).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
Record
SUSE-SU-2023:2982-1
Updated
2026-11-02
OSVSUSE-SU-2023:3018-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3018-1
Updated
2026-11-02
OSVSUSE-SU-2023:3207-1 No score

Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3207-1
Updated
2026-11-02
OSVSUSE-SU-2023:3225-1 No score

Security update for qt6-base

This update for qt6-base fixes the following issues:

  • CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).
  • CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).
  • CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).
  • CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).
  • CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).
Record
SUSE-SU-2023:3225-1
Updated
2026-11-02
OSVUSN-7780-1 No score

qtbase-opensource-src vulnerabilities

It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-24607)

It was discovered that Qt did not correctly parse certain strict-transport- security headers. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-32762)

It was discovered that Qt did not correctly handle certain inputs from DNS servers. A remote attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2023-33285)

It was discovered that Qt did not correctly validate certain CA certificates for TLS. An attacker could possibly use this issue to gain access to unauthorized resources. (CVE-2023-34410)

Record
USN-7780-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt5-qtbase
Azure Linux:2
 before 5.15.9-1
5.15.9-1
qt6-base
Debian:12
 before 6.4.2+dfsg-7
6.4.2+dfsg-7
qt6-base
Debian:13
 before 6.4.2+dfsg-7
6.4.2+dfsg-7
qt6-base
Debian:14
 before 6.4.2+dfsg-7
6.4.2+dfsg-7
qtbase-opensource-src
Debian:12
 before 5.15.8+dfsg-3
5.15.8+dfsg-3
qtbase-opensource-src
Debian:13
 before 5.15.8+dfsg-3
5.15.8+dfsg-3
qtbase-opensource-src
Debian:14
 before 5.15.8+dfsg-3
5.15.8+dfsg-3
qtbase-opensource-src
Debian:10
From an advisory covering 7 CVEs
 before 5.11.3+dfsg1-1+deb10u6, plus listed versions
5.11.3+dfsg1-15.11.3+dfsg1-1+deb10u15.11.3+dfsg1-1+deb10u25.11.3+dfsg1-1+deb10u35.11.3+dfsg1-1+deb10u45.11.3+dfsg1-1+deb10u5
5.11.3+dfsg1-1+deb10u6
qtbase5
Mageia:8
From an advisory covering 2 CVEs
 before 5.15.2-4.8.mga8
5.15.2-4.8.mga8
qt5-qtbase
openEuler:22.03-LTS
 before 5.15.2-6.oe2203
5.15.2-6.oe2203
Show 53 moreShow less
Affected packages
PackageAffectedFixed
qt5-qtbase
openEuler:20.03-LTS-SP1
 before 5.11.1-14.oe1
5.11.1-14.oe1
qt5-qtbase
openEuler:20.03-LTS-SP3
 before 5.11.1-14.oe1
5.11.1-14.oe1
qt5-qtbase
openEuler:22.03-LTS-SP2
From an advisory covering 3 CVEs
 before 5.15.2-7.oe2203sp2
5.15.2-7.oe2203sp2
qt5-qtbase
openEuler:22.03-LTS-SP1
 before 5.15.2-7.oe2203sp1
5.15.2-7.oe2203sp1
qt6-base
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 6.2.2-150400.4.3.1
6.2.2-150400.4.3.1
qt6-base
openSUSE:Leap 15.4
 before 6.2.2-150400.4.3.1
6.2.2-150400.4.3.1
qt6-base-docs
openSUSE:Leap 15.4
 before 6.2.2-150400.4.3.1
6.2.2-150400.4.3.1
libqt5-qtbase
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 5.6.2-6.36.1
5.6.2-6.36.1
libqt5-qtbase
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 5.6.2-6.36.1
5.6.2-6.36.1
libqt5-qtbase
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 5.6.2-6.36.1
5.6.2-6.36.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
openSUSE:Leap 15.4
From an advisory covering 6 CVEs
 before 5.15.2+kde294-150400.6.6.1
5.15.2+kde294-150400.6.6.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Basesystem 15 SP5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 5.15.8+kde185-150500.4.8.1
5.15.8+kde185-150500.4.8.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Manager Proxy 4.2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Manager Server 4.2
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Enterprise Storage 7
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
libqt5-qtbase
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 5.12.7-150200.4.23.1
5.12.7-150200.4.23.1
qt6-base
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.4
6.4.2-150500.3.7.4
qt6-base-docs
openSUSE:Leap 15.5
From an advisory covering 5 CVEs
 before 6.4.2-150500.3.7.1
6.4.2-150500.3.7.1
qtbase-opensource-src
Ubuntu:Pro:16.04:LTS
 before 5.5.1+dfsg-16ubuntu7.7+esm1, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 13 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.7
5.5.1+dfsg-16ubuntu7.7+esm1
qtbase-opensource-src-gles
Ubuntu:16.04:LTS
 All versions, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu15.5.1+dfsg-10ubuntu15.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 9 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu45.5.1+dfsg-16ubuntu55.5.1+dfsg-16ubuntu6
 None known
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
 before 5.9.5+dfsg-0ubuntu2.6+esm1, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 10 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.6
5.9.5+dfsg-0ubuntu2.6+esm1
qtbase-opensource-src
Ubuntu:Pro:20.04:LTS
 before 5.12.8+dfsg-0ubuntu2.1+esm1, plus listed versions
5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.1
5.12.8+dfsg-0ubuntu2.1+esm1
qtbase-opensource-src-gles
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.12.4+dfsg-1build15.12.5+dfsg-15.12.5+dfsg-25.12.8+dfsg-0ubuntu1
 None known
qt6-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.2+dfsg-5ubuntu16.2.2+dfsg-6ubuntu16.2.2+dfsg-6ubuntu26.2.4+dfsg-1ubuntu16.2.4+dfsg-2ubuntu16.2.4+dfsg-2ubuntu1.1
 None known
qtbase-opensource-src-gles
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.2+dfsg-45.15.2+dfsg-55.15.3+dfsg-1
 None known
qtbase-opensource-src
Ubuntu:Pro:22.04:LTS
 before 5.15.3+dfsg-2ubuntu0.2+esm1, plus listed versions
5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3
Show 5 moreShow less
5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.2
5.15.3+dfsg-2ubuntu0.2+esm1
qt6-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.4.2+dfsg-186.4.2+dfsg-196.4.2+dfsg-19build16.4.2+dfsg-206.4.2+dfsg-216.4.2+dfsg-21.1build46.4.2+dfsg-21.1build5
 None known
qtbase-opensource-src-gles
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.15.10+dfsg-25.15.10+dfsg-35.15.12+dfsg-15.15.12+dfsg-1ubuntu15.15.12+dfsg-1ubuntu25.15.13+dfsg-1
 None known
qt6-base
Ubuntu:25.10
 All versions, plus listed versions
6.8.3+dfsg-0ubuntu26.8.3+dfsg-0ubuntu36.9.2+dfsg-1ubuntu1
 None known
qtbase-opensource-src-gles
Ubuntu:25.10
 All versions, plus listed versions
5.15.15+dfsg-25.15.17+dfsg-1
 None known
qt6-base
Ubuntu:26.10
 All versions, plus listed versions
6.10.2+dfsg-76.10.2+dfsg-14ubuntu26.10.2+dfsg-156.10.2+dfsg-166.11.2+dfsg-4ubuntu2
 None known
qtbase-opensource-src-gles
Ubuntu:26.10
 All versions, plus listed versions
5.15.18+dfsg-15.15.19+dfsg-2
 None known
qt6-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
6.9.2+dfsg-1ubuntu16.9.2+dfsg-26.9.2+dfsg-3ubuntu16.9.2+dfsg-3ubuntu26.9.2+dfsg-46.10.2+dfsg-36.10.2+dfsg-66.10.2+dfsg-7
 None known
qtbase-opensource-src-gles
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.15.17+dfsg-15.15.17+dfsg-25.15.18+dfsg-1
 None known
qtbase-opensource-src
Ubuntu:Pro:16.04:LTS
From an advisory covering 4 CVEs
 before 5.5.1+dfsg-16ubuntu7.7+esm1, plus listed versions
5.4.2+dfsg-2ubuntu95.5.1+dfsg-6ubuntu45.5.1+dfsg-10ubuntu25.5.1+dfsg-13ubuntu15.5.1+dfsg-13ubuntu2
Show 13 moreShow less
5.5.1+dfsg-13ubuntu35.5.1+dfsg-14ubuntu15.5.1+dfsg-14ubuntu25.5.1+dfsg-14ubuntu35.5.1+dfsg-15ubuntu15.5.1+dfsg-16ubuntu15.5.1+dfsg-16ubuntu65.5.1+dfsg-16ubuntu75.5.1+dfsg-16ubuntu7.15.5.1+dfsg-16ubuntu7.25.5.1+dfsg-16ubuntu7.55.5.1+dfsg-16ubuntu7.65.5.1+dfsg-16ubuntu7.7
5.5.1+dfsg-16ubuntu7.7+esm1
qtbase-opensource-src
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 5.9.5+dfsg-0ubuntu2.6+esm1, plus listed versions
5.9.1+dfsg-10ubuntu15.9.1+dfsg-10ubuntu25.9.2+dfsg-4ubuntu65.9.3+dfsg-0ubuntu15.9.3+dfsg-0ubuntu3
Show 10 moreShow less
5.9.3+dfsg-0ubuntu45.9.4+dfsg-0ubuntu35.9.4+dfsg-0ubuntu45.9.5+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2.15.9.5+dfsg-0ubuntu2.35.9.5+dfsg-0ubuntu2.45.9.5+dfsg-0ubuntu2.55.9.5+dfsg-0ubuntu2.6
5.9.5+dfsg-0ubuntu2.6+esm1
qtbase-opensource-src
Ubuntu:Pro:20.04:LTS
From an advisory covering 4 CVEs
 before 5.12.8+dfsg-0ubuntu2.1+esm1, plus listed versions
5.12.4+dfsg-4ubuntu15.12.5+dfsg-25.12.5+dfsg-85.12.5+dfsg-8build15.12.5+dfsg-9build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu2.1
5.12.8+dfsg-0ubuntu2.1+esm1
qtbase-opensource-src
Ubuntu:Pro:22.04:LTS
From an advisory covering 4 CVEs
 before 5.15.3+dfsg-2ubuntu0.2+esm1, plus listed versions
5.15.2+dfsg-125.15.2+dfsg-135.15.2+dfsg-145.15.2+dfsg-14ubuntu15.15.2+dfsg-14ubuntu3
Show 5 moreShow less
5.15.2+dfsg-155.15.3+dfsg-15.15.3+dfsg-25.15.3+dfsg-2ubuntu0.15.15.3+dfsg-2ubuntu0.2
5.15.3+dfsg-2ubuntu0.2+esm1
qt6-base
openSUSE:Tumbleweed
 before 6.4.2-2.1
6.4.2-2.1
libqt5-qtbase
openSUSE:Tumbleweed
 before 5.15.8+kde183-1.1
5.15.8+kde183-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-24607 is a high vulnerability (CVSS 7.5) in Qt, published February 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. Fixed in qt5-qtbase 5.15.9-1.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open