CVE-2018-15518
libqt5test5: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML...
CVE-2018-15518 is fixed in 46 products on 1 platform, first by libqt5concurrent5 5.9.5+dfsg-0ubuntu2.1, released December 25, 2018. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
8.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0250
84th percentile
QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libqt5concurrent5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5concurrent5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5core5a · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5core5a 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5dbus5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5dbus5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5gui5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5gui5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5network5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5network5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5opengl5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5opengl5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5printsupport5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5printsupport5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-ibase · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-ibase 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-mysql · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-mysql 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-odbc · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-odbc 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-psql · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-psql 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-sqlite · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-sqlite 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5sql5-tds · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5sql5-tds 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5test5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5test5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5widgets5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5widgets5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| libqt5xml5 · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | libqt5xml5 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qt5-assistant · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-assistant · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-default · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qt5-default 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qt5-designer · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-designer · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-doctools · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-doctools · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-gtk-platformtheme · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qt5-gtk-platformtheme 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qt5-linguist · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-linguist · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qdbusviewer · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qdbusviewer · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qmake · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qt5-qmake 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qt5-qmake-bin · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qt5-qmake-bin 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qt5-qtbase · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-common · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-common · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-devel · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-devel · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-examples · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-examples · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-gui · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-gui · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-mysql · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-mysql · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-odbc · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-odbc · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-postgresql · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-postgresql · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qtbase-static · RHEL 8 | 0:5.11.1-7.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qtbase-static · ol 8 | 0:5.11.1-7.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-common · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-common · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-devel · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-devel · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-examples · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-examples · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-libs-designer · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-libs-designer · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-libs-designercomponents · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-libs-designercomponents · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-libs-help · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-libs-help · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qt5-qttools-static · RHEL 8 | 0:5.11.1-9.el8 | RHSA-2019:3390 | Nov 5, 2019 |
| qt5-qttools-static · ol 8 | 0:5.11.1-9.el8 | ELSA-2019-3390 | Nov 14, 2019 |
| qtbase5-dev-tools · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qtbase5-dev-tools 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qtbase5-doc-html · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qtbase5-doc-html 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |
| qtbase5-examples · Ubuntu 18.04.6 LTS (bionic) | 5.9.5+dfsg-0ubuntu2.1 | qtbase5-examples 5.9.5+dfsg-0ubuntu2.1 | Dec 25, 2018 |