Rapid7 Vulnerability & Exploit Database

Red Hat: CVE-2018-15518: CVE-2018-15518 qt5-qtbase: Double free in QXmlStreamReader (Multiple Advisories)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Red Hat: CVE-2018-15518: CVE-2018-15518 qt5-qtbase: Double free in QXmlStreamReader (Multiple Advisories)

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
12/26/2018
Created
08/08/2019
Added
08/07/2019
Modified
11/27/2024

Description

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

Solution(s)

  • redhat-upgrade-qt
  • redhat-upgrade-qt-assistant
  • redhat-upgrade-qt-config
  • redhat-upgrade-qt-debuginfo
  • redhat-upgrade-qt-demos
  • redhat-upgrade-qt-devel
  • redhat-upgrade-qt-devel-private
  • redhat-upgrade-qt-doc
  • redhat-upgrade-qt-examples
  • redhat-upgrade-qt-mysql
  • redhat-upgrade-qt-odbc
  • redhat-upgrade-qt-postgresql
  • redhat-upgrade-qt-qdbusviewer
  • redhat-upgrade-qt-qvfb
  • redhat-upgrade-qt-x11
  • redhat-upgrade-qt5-assistant
  • redhat-upgrade-qt5-assistant-debuginfo
  • redhat-upgrade-qt5-designer
  • redhat-upgrade-qt5-designer-debuginfo
  • redhat-upgrade-qt5-doctools
  • redhat-upgrade-qt5-doctools-debuginfo
  • redhat-upgrade-qt5-linguist
  • redhat-upgrade-qt5-linguist-debuginfo
  • redhat-upgrade-qt5-qdbusviewer
  • redhat-upgrade-qt5-qdbusviewer-debuginfo
  • redhat-upgrade-qt5-qt3d
  • redhat-upgrade-qt5-qt3d-debuginfo
  • redhat-upgrade-qt5-qt3d-devel
  • redhat-upgrade-qt5-qt3d-doc
  • redhat-upgrade-qt5-qt3d-examples
  • redhat-upgrade-qt5-qtbase
  • redhat-upgrade-qt5-qtbase-common
  • redhat-upgrade-qt5-qtbase-debuginfo
  • redhat-upgrade-qt5-qtbase-debugsource
  • redhat-upgrade-qt5-qtbase-devel
  • redhat-upgrade-qt5-qtbase-devel-debuginfo
  • redhat-upgrade-qt5-qtbase-doc
  • redhat-upgrade-qt5-qtbase-examples
  • redhat-upgrade-qt5-qtbase-examples-debuginfo
  • redhat-upgrade-qt5-qtbase-gui
  • redhat-upgrade-qt5-qtbase-gui-debuginfo
  • redhat-upgrade-qt5-qtbase-mysql
  • redhat-upgrade-qt5-qtbase-mysql-debuginfo
  • redhat-upgrade-qt5-qtbase-odbc
  • redhat-upgrade-qt5-qtbase-odbc-debuginfo
  • redhat-upgrade-qt5-qtbase-postgresql
  • redhat-upgrade-qt5-qtbase-postgresql-debuginfo
  • redhat-upgrade-qt5-qtbase-static
  • redhat-upgrade-qt5-qtbase-tests-debuginfo
  • redhat-upgrade-qt5-qtcanvas3d
  • redhat-upgrade-qt5-qtcanvas3d-debuginfo
  • redhat-upgrade-qt5-qtcanvas3d-doc
  • redhat-upgrade-qt5-qtcanvas3d-examples
  • redhat-upgrade-qt5-qtconnectivity
  • redhat-upgrade-qt5-qtconnectivity-debuginfo
  • redhat-upgrade-qt5-qtconnectivity-devel
  • redhat-upgrade-qt5-qtconnectivity-doc
  • redhat-upgrade-qt5-qtconnectivity-examples
  • redhat-upgrade-qt5-qtdeclarative
  • redhat-upgrade-qt5-qtdeclarative-debuginfo
  • redhat-upgrade-qt5-qtdeclarative-devel
  • redhat-upgrade-qt5-qtdeclarative-doc
  • redhat-upgrade-qt5-qtdeclarative-examples
  • redhat-upgrade-qt5-qtdeclarative-static
  • redhat-upgrade-qt5-qtdoc
  • redhat-upgrade-qt5-qtgraphicaleffects
  • redhat-upgrade-qt5-qtgraphicaleffects-debuginfo
  • redhat-upgrade-qt5-qtgraphicaleffects-doc
  • redhat-upgrade-qt5-qtimageformats
  • redhat-upgrade-qt5-qtimageformats-debuginfo
  • redhat-upgrade-qt5-qtimageformats-doc
  • redhat-upgrade-qt5-qtlocation
  • redhat-upgrade-qt5-qtlocation-debuginfo
  • redhat-upgrade-qt5-qtlocation-devel
  • redhat-upgrade-qt5-qtlocation-doc
  • redhat-upgrade-qt5-qtlocation-examples
  • redhat-upgrade-qt5-qtmultimedia
  • redhat-upgrade-qt5-qtmultimedia-debuginfo
  • redhat-upgrade-qt5-qtmultimedia-devel
  • redhat-upgrade-qt5-qtmultimedia-doc
  • redhat-upgrade-qt5-qtmultimedia-examples
  • redhat-upgrade-qt5-qtquickcontrols
  • redhat-upgrade-qt5-qtquickcontrols-debuginfo
  • redhat-upgrade-qt5-qtquickcontrols-doc
  • redhat-upgrade-qt5-qtquickcontrols-examples
  • redhat-upgrade-qt5-qtquickcontrols2
  • redhat-upgrade-qt5-qtquickcontrols2-debuginfo
  • redhat-upgrade-qt5-qtquickcontrols2-devel
  • redhat-upgrade-qt5-qtquickcontrols2-doc
  • redhat-upgrade-qt5-qtquickcontrols2-examples
  • redhat-upgrade-qt5-qtscript
  • redhat-upgrade-qt5-qtscript-debuginfo
  • redhat-upgrade-qt5-qtscript-devel
  • redhat-upgrade-qt5-qtscript-doc
  • redhat-upgrade-qt5-qtscript-examples
  • redhat-upgrade-qt5-qtsensors
  • redhat-upgrade-qt5-qtsensors-debuginfo
  • redhat-upgrade-qt5-qtsensors-devel
  • redhat-upgrade-qt5-qtsensors-doc
  • redhat-upgrade-qt5-qtsensors-examples
  • redhat-upgrade-qt5-qtserialbus
  • redhat-upgrade-qt5-qtserialbus-debuginfo
  • redhat-upgrade-qt5-qtserialbus-devel
  • redhat-upgrade-qt5-qtserialbus-doc
  • redhat-upgrade-qt5-qtserialbus-examples
  • redhat-upgrade-qt5-qtserialport
  • redhat-upgrade-qt5-qtserialport-debuginfo
  • redhat-upgrade-qt5-qtserialport-devel
  • redhat-upgrade-qt5-qtserialport-doc
  • redhat-upgrade-qt5-qtserialport-examples
  • redhat-upgrade-qt5-qtsvg
  • redhat-upgrade-qt5-qtsvg-debuginfo
  • redhat-upgrade-qt5-qtsvg-devel
  • redhat-upgrade-qt5-qtsvg-doc
  • redhat-upgrade-qt5-qtsvg-examples
  • redhat-upgrade-qt5-qttools
  • redhat-upgrade-qt5-qttools-common
  • redhat-upgrade-qt5-qttools-debuginfo
  • redhat-upgrade-qt5-qttools-debugsource
  • redhat-upgrade-qt5-qttools-devel
  • redhat-upgrade-qt5-qttools-devel-debuginfo
  • redhat-upgrade-qt5-qttools-doc
  • redhat-upgrade-qt5-qttools-examples
  • redhat-upgrade-qt5-qttools-examples-debuginfo
  • redhat-upgrade-qt5-qttools-libs-designer
  • redhat-upgrade-qt5-qttools-libs-designer-debuginfo
  • redhat-upgrade-qt5-qttools-libs-designercomponents
  • redhat-upgrade-qt5-qttools-libs-designercomponents-debuginfo
  • redhat-upgrade-qt5-qttools-libs-help
  • redhat-upgrade-qt5-qttools-libs-help-debuginfo
  • redhat-upgrade-qt5-qttools-static
  • redhat-upgrade-qt5-qttools-tests-debuginfo
  • redhat-upgrade-qt5-qttranslations
  • redhat-upgrade-qt5-qtwayland
  • redhat-upgrade-qt5-qtwayland-debuginfo
  • redhat-upgrade-qt5-qtwayland-devel
  • redhat-upgrade-qt5-qtwayland-doc
  • redhat-upgrade-qt5-qtwayland-examples
  • redhat-upgrade-qt5-qtwebchannel
  • redhat-upgrade-qt5-qtwebchannel-debuginfo
  • redhat-upgrade-qt5-qtwebchannel-devel
  • redhat-upgrade-qt5-qtwebchannel-doc
  • redhat-upgrade-qt5-qtwebchannel-examples
  • redhat-upgrade-qt5-qtwebsockets
  • redhat-upgrade-qt5-qtwebsockets-debuginfo
  • redhat-upgrade-qt5-qtwebsockets-devel
  • redhat-upgrade-qt5-qtwebsockets-doc
  • redhat-upgrade-qt5-qtwebsockets-examples
  • redhat-upgrade-qt5-qtx11extras
  • redhat-upgrade-qt5-qtx11extras-debuginfo
  • redhat-upgrade-qt5-qtx11extras-devel
  • redhat-upgrade-qt5-qtx11extras-doc
  • redhat-upgrade-qt5-qtxmlpatterns
  • redhat-upgrade-qt5-qtxmlpatterns-debuginfo
  • redhat-upgrade-qt5-qtxmlpatterns-devel
  • redhat-upgrade-qt5-qtxmlpatterns-doc
  • redhat-upgrade-qt5-qtxmlpatterns-examples
  • redhat-upgrade-qt5-rpm-macros

References

  • CVE-2018-15518
  • RHSA-2019:2135
  • RHSA-2019:3390
  • RHSA-2020:1172

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;