Vulnerabilities > CVE-2020-0569 - Out-of-bounds Write vulnerability in multiple products
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
NASL family Debian Local Security Checks NASL id DEBIAN_DSA-4617.NASL description Two security issues were found in the Qt library, which could result in plugins and libraries being loaded from the current working directory, resulting in potential code execution. last seen 2020-06-01 modified 2020-06-02 plugin id 133475 published 2020-02-05 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133475 title Debian DSA-4617-1 : qtbase-opensource-src - security update code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DSA-4617. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(133475); script_version("1.2"); script_cvs_date("Date: 2020/02/07"); script_cve_id("CVE-2020-0569", "CVE-2020-0570"); script_xref(name:"DSA", value:"4617"); script_name(english:"Debian DSA-4617-1 : qtbase-opensource-src - security update"); script_summary(english:"Checks dpkg output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security-related update." ); script_set_attribute( attribute:"description", value: "Two security issues were found in the Qt library, which could result in plugins and libraries being loaded from the current working directory, resulting in potential code execution." ); # https://security-tracker.debian.org/tracker/source-package/qtbase-opensource-src script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?daec893f" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/stretch/qtbase-opensource-src" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/buster/qtbase-opensource-src" ); script_set_attribute( attribute:"see_also", value:"https://www.debian.org/security/2020/dsa-4617" ); script_set_attribute( attribute:"solution", value: "Upgrade the qtbase-opensource-src packages. For the oldstable distribution (stretch), these problems have been fixed in version 5.7.1+dfsg-3+deb9u2. For the stable distribution (buster), these problems have been fixed in version 5.11.3+dfsg1-1+deb10u3." ); script_set_attribute(attribute:"risk_factor", value:"High"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase-opensource-src"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:10.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/05"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"10.0", prefix:"libqt5concurrent5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5core5a", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5dbus5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5gui5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5network5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5opengl5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5opengl5-dev", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5printsupport5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-ibase", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-mysql", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-odbc", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-psql", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-sqlite", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5sql5-tds", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5test5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5widgets5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"libqt5xml5", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qt5-default", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qt5-flatpak-platformtheme", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qt5-gtk-platformtheme", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qt5-qmake", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qt5-qmake-bin", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-dev", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-dev-tools", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-doc", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-doc-html", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-examples", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"10.0", prefix:"qtbase5-private-dev", reference:"5.11.3+dfsg1-1+deb10u3")) flag++; if (deb_check(release:"9.0", prefix:"libqt5concurrent5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5core5a", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5dbus5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5gui5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5network5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5opengl5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5opengl5-dev", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5printsupport5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-ibase", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-mysql", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-odbc", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-psql", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-sqlite", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5sql5-tds", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5test5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5widgets5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"libqt5xml5", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qt5-default", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qt5-gtk-platformtheme", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qt5-qmake", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-dev", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-dev-tools", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-doc", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-doc-html", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-examples", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (deb_check(release:"9.0", prefix:"qtbase5-private-dev", reference:"5.7.1+dfsg-3+deb9u2")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family SuSE Local Security Checks NASL id OPENSUSE-2020-209.NASL description This update for libqt5-qtbase fixes the following issues : Security issue fixed:	 - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). Other issue fixed : - Fixed comboboxes not showing in correct location (bsc#1158667). This update was imported from the SUSE:SLE-15-SP1:Update update project. last seen 2020-06-01 modified 2020-06-02 plugin id 133667 published 2020-02-13 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133667 title openSUSE Security Update : libqt5-qtbase (openSUSE-2020-209) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from openSUSE Security Update openSUSE-2020-209. # # The text description of this plugin is (C) SUSE LLC. # include("compat.inc"); if (description) { script_id(133667); script_version("1.1"); script_cvs_date("Date: 2020/02/13"); script_cve_id("CVE-2020-0569"); script_name(english:"openSUSE Security Update : libqt5-qtbase (openSUSE-2020-209)"); script_summary(english:"Check for the openSUSE-2020-209 patch"); script_set_attribute( attribute:"synopsis", value:"The remote openSUSE host is missing a security update." ); script_set_attribute( attribute:"description", value: "This update for libqt5-qtbase fixes the following issues : Security issue fixed:	 - CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). Other issue fixed : - Fixed comboboxes not showing in correct location (bsc#1158667). This update was imported from the SUSE:SLE-15-SP1:Update update project." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1158667" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1161167" ); script_set_attribute( attribute:"solution", value:"Update the affected libqt5-qtbase packages." ); script_set_attribute(attribute:"risk_factor", value:"High"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Bootstrap-devel-static"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Bootstrap-devel-static-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Concurrent5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Core5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus-devel-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus-devel-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5DBus5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Gui5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5KmsSupport-devel-static"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5KmsSupport-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Network5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGL5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGLExtensions-devel-static"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5OpenGLExtensions-devel-static-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PlatformHeaders-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PlatformSupport-devel-static"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PlatformSupport-devel-static-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PlatformSupport-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5PrintSupport5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-mysql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-mysql-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-mysql-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-mysql-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-postgresql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-postgresql-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-postgresql-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-postgresql-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-sqlite"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-sqlite-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-sqlite-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-sqlite-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-unixODBC"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-unixODBC-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-unixODBC-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Sql5-unixODBC-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Test5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Widgets5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml-devel-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml5-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml5-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libQt5Xml5-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-common-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-common-devel-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-examples"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-examples-32bit"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-examples-32bit-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-examples-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-platformtheme-gtk3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-platformtheme-gtk3-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libqt5-qtbase-private-headers-devel"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.1"); script_set_attribute(attribute:"patch_publication_date", value:"2020/02/11"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/13"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE"); if (release !~ "^(SUSE15\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.1", release); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); ourarch = get_kb_item("Host/cpu"); if (!ourarch) audit(AUDIT_UNKNOWN_ARCH); if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch); flag = 0; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Bootstrap-devel-static-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Concurrent-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Concurrent5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Concurrent5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Core-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Core-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Core5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Core5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5DBus-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5DBus-devel-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5DBus-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5DBus5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5DBus5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Gui-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Gui-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Gui5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Gui5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5KmsSupport-devel-static-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5KmsSupport-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Network-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Network-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Network5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Network5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5OpenGL-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5OpenGL-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5OpenGL5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5OpenGL5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5OpenGLExtensions-devel-static-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PlatformHeaders-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PlatformSupport-devel-static-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PlatformSupport-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PrintSupport-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PrintSupport-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PrintSupport5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5PrintSupport5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-mysql-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-mysql-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-postgresql-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-postgresql-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-sqlite-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-sqlite-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-unixODBC-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Sql5-unixODBC-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Test-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Test-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Test5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Test5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Widgets-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Widgets-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Widgets5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Widgets5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Xml-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Xml5-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libQt5Xml5-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-common-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-common-devel-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-debugsource-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-examples-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-examples-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-platformtheme-gtk3-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", reference:"libqt5-qtbase-private-headers-devel-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Bootstrap-devel-static-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Concurrent-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Concurrent5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Concurrent5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Core-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Core5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Core5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5DBus-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5DBus-devel-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5DBus5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5DBus5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Gui-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Gui5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Gui5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Network-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Network5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Network5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5OpenGL-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5OpenGL5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5OpenGL5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5OpenGLExtensions-devel-static-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5PlatformSupport-devel-static-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5PrintSupport-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5PrintSupport5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5PrintSupport5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-mysql-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-mysql-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-postgresql-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-postgresql-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-sqlite-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-sqlite-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-unixODBC-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Sql5-unixODBC-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Test-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Test5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Test5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Widgets-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Widgets5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Widgets5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Xml-devel-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Xml5-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libQt5Xml5-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libqt5-qtbase-examples-32bit-5.9.7-lp151.4.3.1") ) flag++; if ( rpm_check(release:"SUSE15.1", cpu:"x86_64", reference:"libqt5-qtbase-examples-32bit-debuginfo-5.9.7-lp151.4.3.1") ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc"); }NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-202003-60.NASL description The remote host is affected by the vulnerability described in GLSA-202003-60 (QtCore: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in QtCore. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Workaround : There is no known workaround at this time. last seen 2020-04-01 modified 2020-03-27 plugin id 134968 published 2020-03-27 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/134968 title GLSA-202003-60 : QtCore: Multiple vulnerabilities code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Gentoo Linux Security Advisory GLSA 202003-60. # # The advisory text is Copyright (C) 2001-2020 Gentoo Foundation, Inc. # and licensed under the Creative Commons - Attribution / Share Alike # license. See http://creativecommons.org/licenses/by-sa/3.0/ # include("compat.inc"); if (description) { script_id(134968); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/31"); script_cve_id("CVE-2019-18281", "CVE-2020-0569", "CVE-2020-0570"); script_xref(name:"GLSA", value:"202003-60"); script_name(english:"GLSA-202003-60 : QtCore: Multiple vulnerabilities"); script_summary(english:"Checks for updated package(s) in /var/db/pkg"); script_set_attribute( attribute:"synopsis", value: "The remote Gentoo host is missing one or more security-related patches." ); script_set_attribute( attribute:"description", value: "The remote host is affected by the vulnerability described in GLSA-202003-60 (QtCore: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in QtCore. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Workaround : There is no known workaround at this time." ); script_set_attribute( attribute:"see_also", value:"https://security.gentoo.org/glsa/202003-60" ); script_set_attribute( attribute:"solution", value: "All QtCore 5.12.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-qt/qtcore-5.12.3-r2' All QtCore 5.13.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-qt/qtcore-5.13.2-r2'" ); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:qtcore"); script_set_attribute(attribute:"cpe", value:"cpe:/o:gentoo:linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/10/23"); script_set_attribute(attribute:"patch_publication_date", value:"2020/03/26"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/03/27"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Gentoo Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("qpkg.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Gentoo/release")) audit(AUDIT_OS_NOT, "Gentoo"); if (!get_kb_item("Host/Gentoo/qpkg-list")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (qpkg_check(package:"dev-qt/qtcore", unaffected:make_list("rge 5.12.3-r2", "rge 5.13.2-r2"), vulnerable:make_list("lt 5.13.2-r2"))) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:qpkg_report_get()); else security_warning(0); exit(0); } else { tested = qpkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "QtCore"); }NASL family Debian Local Security Checks NASL id DEBIAN_DLA-2092.NASL description In Qt5 last seen 2020-06-01 modified 2020-06-02 plugin id 133412 published 2020-02-03 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133412 title Debian DLA-2092-1 : qtbase-opensource-src security update code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DLA-2092-1. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(133412); script_version("1.2"); script_cvs_date("Date: 2020/02/05"); script_cve_id("CVE-2020-0569"); script_name(english:"Debian DLA-2092-1 : qtbase-opensource-src security update"); script_summary(english:"Checks dpkg output for the updated packages."); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security update." ); script_set_attribute( attribute:"description", value: "In Qt5's plugin loader code as found in qtbase-opensource-src, it was possible to (side-)load plugins from 'the' local folder in addition to a system-widely defined library path. For Debian 8 'Jessie', this problem has been fixed in version 5.3.2+dfsg-4+deb8u4. We recommend that you upgrade your qtbase-opensource-src packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://lists.debian.org/debian-lts-announce/2020/02/msg00000.html" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/jessie/qtbase-opensource-src" ); script_set_attribute(attribute:"solution", value:"Upgrade the affected packages."); script_set_attribute(attribute:"risk_factor", value:"High"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5concurrent5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5core5a"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5dbus5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5gui5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5network5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5opengl5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5opengl5-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5printsupport5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5-mysql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5-odbc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5-psql"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5-sqlite"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5sql5-tds"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5test5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5widgets5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libqt5xml5"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qt5-default"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qt5-qmake"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-dev-tools"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-dev-tools-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-doc-html"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-examples"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-examples-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:qtbase5-private-dev"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0"); script_set_attribute(attribute:"patch_publication_date", value:"2020/01/31"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/03"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"8.0", prefix:"libqt5concurrent5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5core5a", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5dbus5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5gui5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5network5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5opengl5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5opengl5-dev", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5printsupport5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5-mysql", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5-odbc", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5-psql", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5-sqlite", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5sql5-tds", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5test5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5widgets5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"libqt5xml5", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qt5-default", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qt5-qmake", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-dbg", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-dev", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-dev-tools", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-dev-tools-dbg", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-doc-html", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-examples", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-examples-dbg", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (deb_check(release:"8.0", prefix:"qtbase5-private-dev", reference:"5.3.2+dfsg-4+deb8u4")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family SuSE Local Security Checks NASL id SUSE_SU-2020-0317-1.NASL description This update for libqt5-qtbase fixes the following issues : Security issues fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133493 published 2020-02-05 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133493 title SUSE SLED12 / SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0317-1) NASL family SuSE Local Security Checks NASL id SUSE_SU-2020-0318-1.NASL description This update for libqt5-qtbase fixes the following issue : Security issue fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). Other issue addressed : Fixed an issue with rendering animated gifs (QTBUG-55141). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133494 published 2020-02-05 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133494 title SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0318-1) NASL family SuSE Local Security Checks NASL id SUSE_SU-2020-0349-1.NASL description This update for libqt5-qtbase fixes the following issues : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133544 published 2020-02-07 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133544 title SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:0349-1) NASL family SuSE Local Security Checks NASL id SUSE_SU-2020-0319-1.NASL description This update for libqt5-qtbase fixes the following issue : Security issues fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). Other issue addressed : Fixed an issue with rendering animated gifs (QTBUG-55141). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133495 published 2020-02-05 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133495 title SUSE SLES12 Security Update : libqt5-qtbase (SUSE-SU-2020:0319-1) NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-4275-1.NASL description It was discovered that Qt incorrectly handled certain PPM images. If a user or automated system were tricked into opening a specially crafted PPM file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19872) It was discovered that Qt incorrectly handled certain text files. If a user or automated system were tricked into opening a specially crafted text file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubuntu 19.10. (CVE-2019-18281) It was discovered that Qt incorrectly searched for plugins in the current working directory. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-0569) It was discovered that Qt incorrectly searched for libraries relative to the current working directory. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 19.10. (CVE-2020-0570). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133647 published 2020-02-12 reporter Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133647 title Ubuntu 16.04 LTS / 18.04 LTS / 19.10 : qtbase-opensource-src vulnerabilities (USN-4275-1) NASL family SuSE Local Security Checks NASL id SUSE_SU-2020-0346-1.NASL description This update for libqt5-qtbase fixes the following issues : Security issue fixed : CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167). Other issue fixed : Fixed comboboxes not showing in correct location (bsc#1158667). Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 133541 published 2020-02-07 reporter This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/133541 title SUSE SLED15 / SLES15 Security Update : libqt5-qtbase (SUSE-SU-2020:0346-1)