CVE-2017-15011: Buffer Overflow

Published Oct 3, 2017

Updated

The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.

Affected Software

24 affected components

Qt QT=5.0.0

Qt QT=5.0.1

Qt QT=5.1.0

Qt QT=5.2.0

Qt QT=5.3.0

Qt QT=5.4.0

Qt QT=5.5.0

Qt QT=5.6.0

Qt QT=5.7.0

Qt QT=5.8.0

Qt QT=5.9.0

Qt QT=5.10.0

Qt QT=5.10.1

Qt QT=5.11.0

Qt QT=5.11.1

Qt QT=5.11.2

Qt QT=5.11.3

Qt QT=5.12.0

Qt QT=5.12.1

Qt QT=5.12.2

Qt QT=5.12.3

Qt QT=5.12.4

Qt QT=5.13.0

Qt QT=5.14.0

Event History

Oct 3, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-15011?

CVE-2017-15011 has a severity rating that suggests it can lead to denial of service in affected applications.

How do I fix CVE-2017-15011?

To fix CVE-2017-15011, update the Qt framework to a version that addresses the named pipe configuration vulnerability.

Which software is affected by CVE-2017-15011?

CVE-2017-15011 affects multiple versions of the Qt framework 5.x, particularly as used in applications like qBittorrent and SugarSync.

What type of vulnerability is CVE-2017-15011?

CVE-2017-15011 is a vulnerability related to improperly configured named pipes that allow remote access.

Can CVE-2017-15011 be exploited remotely?

Yes, CVE-2017-15011 can be exploited by remote attackers to cause a denial of service by sending malicious strings to the application.