9.3 - GLSA-201311-14

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	QtCore, QtGui: Multiple vulnerabilities

Informations
Name	GLSA-201311-14	First vendor Publication	2013-11-22
Vendor	Gentoo	Last vendor Modification	2013-11-22
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been discovered in QtCore and QtGui, possibly resulting in execution of arbitrary code, Denial of Service, or man-in-the-middle attacks.

Background

The Qt toolkit is a comprehensive C++ application development framework.

Description

Multiple vulnerabilities have been discovered in QtCore and QtGui.
Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted file with an application linked against QtCore or QtGui, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker might employ a specially crafted certificate to conduct man-in-the-middle attacks on SSL connections.

Workaround

There is no known workaround at this time.

Resolution

All QtCore users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-qt/qtcore-4.8.4-r2"

All QtGui users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-qt/qtgui-4.8.4-r1"

Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.

References

[ 1 ] CVE-2011-3193 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-3193
[ 2 ] CVE-2013-0254 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0254
[ 3 ] Security advisory: Fraudulent certificates

http://labs.qt.nokia.com/2011/03/29/security-advisory-fraudulent-certificates/
[ 4 ] What the DigiNotar security breach means for Qt users

http://blog.qt.digia.com/2011/09/02/what-the-diginotar-security-breach-means-for-qt-users/

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201311-14.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201311-14.xml

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-787	Out-of-bounds Write (CWE/SANS Top 25)
50 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18039

Oval ID:	oval:org.mitre.oval:def:18039
Title:	USN-1723-1 -- qt4-x11 vulnerabilities
Description:	Several security issues were fixed in Qt.
Family:	unix	Class:	patch
Reference(s):	USN-1723-1 CVE-2012-5624 CVE-2012-6093 CVE-2013-0254	Version:	5
Platform(s):	Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	qt4-x11
Definition Synopsis:
Release section Ubuntu 12.10 is installed Packages match section libqt4-core DPKG is earlier than 4:4.8.3+dfsg-0ubuntu3.1 AND libqt4-network DPKG is earlier than 4:4.8.3+dfsg-0ubuntu3.1 AND Release section Ubuntu 12.04 is installed Packages match section libqt4-core DPKG is earlier than 4:4.8.1-0ubuntu4.4 AND libqt4-network DPKG is earlier than 4:4.8.1-0ubuntu4.4 AND Release section Ubuntu 11.10 is installed Packages match section libqt4-core DPKG is earlier than 4:4.7.4-0ubuntu8.3 AND libqt4-network DPKG is earlier than 4:4.7.4-0ubuntu8.3 AND Release section Ubuntu 10.04 is installed Packages match section libqt4-core DPKG is earlier than 4:4.6.2-0ubuntu5.6 AND libqt4-network DPKG is earlier than 4:4.6.2-0ubuntu5.6

Definition Id: oval:org.mitre.oval:def:20978

Oval ID:	oval:org.mitre.oval:def:20978
Title:	RHSA-2013:0669: qt security update (Moderate)
Description:	The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0669-01 CESA-2013:0669 CVE-2013-0254	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	qt
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section qt-demos is earlier than 1:4.6.2-26.el6_4 AND qt-odbc is earlier than 1:4.6.2-26.el6_4 AND qt-mysql is earlier than 1:4.6.2-26.el6_4 AND qt-x11 is earlier than 1:4.6.2-26.el6_4 AND qt-doc is earlier than 1:4.6.2-26.el6_4 AND phonon-backend-gstreamer is earlier than 1:4.6.2-26.el6_4 AND qt-sqlite is earlier than 1:4.6.2-26.el6_4 AND qt-postgresql is earlier than 1:4.6.2-26.el6_4 AND qt is earlier than 1:4.6.2-26.el6_4 AND qt-devel is earlier than 1:4.6.2-26.el6_4 AND qt-examples is earlier than 1:4.6.2-26.el6_4

Definition Id: oval:org.mitre.oval:def:21629

Oval ID:	oval:org.mitre.oval:def:21629
Title:	RHSA-2011:1326: pango security update (Moderate)
Description:	Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1326-01 CESA-2011:1326 CVE-2011-3193	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	pango
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section pango-devel is earlier than 0:1.14.9-8.el5_7.3 AND pango is earlier than 0:1.14.9-8.el5_7.3

Definition Id: oval:org.mitre.oval:def:22150

Oval ID:	oval:org.mitre.oval:def:22150
Title:	RHSA-2011:1324: qt4 security update (Moderate)
Description:	Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1324-01 CESA-2011:1324 CVE-2007-0242 CVE-2011-3193	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	qt4
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section qt4-odbc is earlier than 0:4.2.1-1.el5_7.1 AND qt4-devel is earlier than 0:4.2.1-1.el5_7.1 AND qt4-postgresql is earlier than 0:4.2.1-1.el5_7.1 AND qt4 is earlier than 0:4.2.1-1.el5_7.1 AND qt4-sqlite is earlier than 0:4.2.1-1.el5_7.1 AND qt4-mysql is earlier than 0:4.2.1-1.el5_7.1 AND qt4-doc is earlier than 0:4.2.1-1.el5_7.1

Definition Id: oval:org.mitre.oval:def:23280

Oval ID:	oval:org.mitre.oval:def:23280
Title:	ELSA-2011:1326: pango security update (Moderate)
Description:	Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1326-01 CVE-2011-3193	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	pango
Definition Synopsis:
Oracle Linux 5.x rpm test pango-devel is earlier than 0:1.14.9-8.el5_7.3 AND pango is earlier than 0:1.14.9-8.el5_7.3

Definition Id: oval:org.mitre.oval:def:23408

Oval ID:	oval:org.mitre.oval:def:23408
Title:	ELSA-2011:1324: qt4 security update (Moderate)
Description:	Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1324-01 CVE-2007-0242 CVE-2011-3193	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	qt4
Definition Synopsis:
Oracle Linux 5.x rpm test qt4-odbc is earlier than 0:4.2.1-1.el5_7.1 AND qt4-devel is earlier than 0:4.2.1-1.el5_7.1 AND qt4-postgresql is earlier than 0:4.2.1-1.el5_7.1 AND qt4 is earlier than 0:4.2.1-1.el5_7.1 AND qt4-sqlite is earlier than 0:4.2.1-1.el5_7.1 AND qt4-mysql is earlier than 0:4.2.1-1.el5_7.1 AND qt4-doc is earlier than 0:4.2.1-1.el5_7.1

Definition Id: oval:org.mitre.oval:def:23668

Oval ID:	oval:org.mitre.oval:def:23668
Title:	ELSA-2013:0669: qt security update (Moderate)
Description:	The QSharedMemory class in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0 uses weak permissions (world-readable and world-writable) for shared memory segments, which allows local users to read sensitive information or modify critical program data, as demonstrated by reading a pixmap being sent to an X server.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0669-01 CVE-2013-0254	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	qt
Definition Synopsis:
Oracle Linux 6.x rpm test qt-demos is earlier than 1:4.6.2-26.el6_4 AND qt-odbc is earlier than 1:4.6.2-26.el6_4 AND qt-mysql is earlier than 1:4.6.2-26.el6_4 AND qt-x11 is earlier than 1:4.6.2-26.el6_4 AND qt-doc is earlier than 1:4.6.2-26.el6_4 AND phonon-backend-gstreamer is earlier than 1:4.6.2-26.el6_4 AND qt-sqlite is earlier than 1:4.6.2-26.el6_4 AND qt-postgresql is earlier than 1:4.6.2-26.el6_4 AND qt is earlier than 1:4.6.2-26.el6_4 AND qt-devel is earlier than 1:4.6.2-26.el6_4 AND qt-examples is earlier than 1:4.6.2-26.el6_4

Definition Id: oval:org.mitre.oval:def:27393

Oval ID:	oval:org.mitre.oval:def:27393
Title:	DEPRECATED: ELSA-2011-1326 -- pango security update (moderate)
Description:	[1.14.9.8.0.1.el5_7.3] - Bump release [1.14.9.8.el5_1.3] - Prevent buffer overflow errors in harfbuzz module (CVE-2011-3193) - Resolves: #737819
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1326 CVE-2011-3193	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	pango
Definition Synopsis:
Oracle Linux 5.x Packages match section pango is earlier than 0:1.14.9-8.0.1.el5_7.3 AND pango-devel is earlier than 0:1.14.9-8.0.1.el5_7.3

Definition Id: oval:org.mitre.oval:def:27414

Oval ID:	oval:org.mitre.oval:def:27414
Title:	DEPRECATED: ELSA-2013-0669 -- qt security update (moderate)
Description:	[1:4.6.2-26] - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0669 CVE-2013-0254	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	qt
Definition Synopsis:
Oracle Linux 6.x Packages match section qt is earlier than 0:4.6.2-26.el6_4 AND phonon-backend-gstreamer is earlier than 0:4.6.2-26.el6_4 AND qt-demos is earlier than 0:4.6.2-26.el6_4 AND qt-devel is earlier than 0:4.6.2-26.el6_4 AND qt-doc is earlier than 0:4.6.2-26.el6_4 AND qt-examples is earlier than 0:4.6.2-26.el6_4 AND qt-mysql is earlier than 0:4.6.2-26.el6_4 AND qt-odbc is earlier than 0:4.6.2-26.el6_4 AND qt-postgresql is earlier than 0:4.6.2-26.el6_4 AND qt-sqlite is earlier than 0:4.6.2-26.el6_4 AND qt-x11 is earlier than 0:4.6.2-26.el6_4

Definition Id: oval:org.mitre.oval:def:28061

Oval ID:	oval:org.mitre.oval:def:28061
Title:	DEPRECATED: ELSA-2011-1324 -- qt4 security update (moderate)
Description:	[4.2.1-1.1] - Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193 - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1324 CVE-2007-0242 CVE-2011-3193	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	qt4
Definition Synopsis:
Oracle Linux 5.x Packages match section qt4 is earlier than 0:4.2.1-1.el5_7.1 AND qt4-devel is earlier than 0:4.2.1-1.el5_7.1 AND qt4-doc is earlier than 0:4.2.1-1.el5_7.1 AND qt4-mysql is earlier than 0:4.2.1-1.el5_7.1 AND qt4-odbc is earlier than 0:4.2.1-1.el5_7.1 AND qt4-postgresql is earlier than 0:4.2.1-1.el5_7.1 AND qt4-sqlite is earlier than 0:4.2.1-1.el5_7.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnome Pango cpe:2.3:a:gnome:pango::::::::	1
Application	Qt cpe:2.3:a:qt:qt:5.0.1:::::::* cpe:2.3:a:qt:qt:5.0.0:-:::::: cpe:2.3:a:qt:qt:4.8.5:::::::* cpe:2.3:a:qt:qt:4.8.4:::::::* cpe:2.3:a:qt:qt:4.8.3:::::::* cpe:2.3:a:qt:qt:4.8.2:::::::* cpe:2.3:a:qt:qt:4.8.1:::::::* cpe:2.3:a:qt:qt:4.8.0:::::::* cpe:2.3:a:qt:qt:4.7.6:::::::* cpe:2.3:a:qt:qt:4.7.5:::::::* cpe:2.3:a:qt:qt:4.7.4:::::::* cpe:2.3:a:qt:qt:4.7.3:::::::* cpe:2.3:a:qt:qt:4.7.2:::::::* cpe:2.3:a:qt:qt:4.7.1:::::::* cpe:2.3:a:qt:qt:4.7.0:::::::* cpe:2.3:a:qt:qt:4.6.5:rc:::::: cpe:2.3:a:qt:qt:4.6.5:::::::* cpe:2.3:a:qt:qt:4.6.4:::::::* cpe:2.3:a:qt:qt:4.6.3:::::::* cpe:2.3:a:qt:qt:4.6.2:::::::* cpe:2.3:a:qt:qt:4.6.1:::::::* cpe:2.3:a:qt:qt:4.6.0:::::::* cpe:2.3:a:qt:qt:4.6.0:rc1:::::: cpe:2.3:a:qt:qt:4.5.3:::::::* cpe:2.3:a:qt:qt:4.5.2:::::::* cpe:2.3:a:qt:qt:4.5.1:::::::* cpe:2.3:a:qt:qt:4.5.0:::::::* cpe:2.3:a:qt:qt:4.4.3:::::::* cpe:2.3:a:qt:qt:4.4.2:::::::* cpe:2.3:a:qt:qt:4.4.1:::::::* cpe:2.3:a:qt:qt:4.4.0:::::::* cpe:2.3:a:qt:qt:4.3.5:::::::* cpe:2.3:a:qt:qt:4.3.4:::::::* cpe:2.3:a:qt:qt:4.3.3:::::::* cpe:2.3:a:qt:qt:4.3.2:::::::* cpe:2.3:a:qt:qt:4.3.1:::::::* cpe:2.3:a:qt:qt:4.3.0:::::::* cpe:2.3:a:qt:qt:4.2.3:::::::* cpe:2.3:a:qt:qt:4.2.1:::::::* cpe:2.3:a:qt:qt:4.2.0:::::::* cpe:2.3:a:qt:qt:4.1.5:::::::* cpe:2.3:a:qt:qt:4.1.4:::::::* cpe:2.3:a:qt:qt:4.1.3:::::::* cpe:2.3:a:qt:qt:4.1.2:::::::* cpe:2.3:a:qt:qt:4.1.1:::::::* cpe:2.3:a:qt:qt:4.1.0:::::::* cpe:2.3:a:qt:qt:4.0.1:::::::* cpe:2.3:a:qt:qt:4.0.0:::::::* cpe:2.3:a:qt:qt:3.3.8:::::::* cpe:2.3:a:qt:qt:3.3.6:::::::* cpe:2.3:a:qt:qt:3.3.5:::::::* cpe:2.3:a:qt:qt:3.3.4:::::::* cpe:2.3:a:qt:qt:3.3.3:::::::* cpe:2.3:a:qt:qt:3.3.2:::::::* cpe:2.3:a:qt:qt:3.3.1:::::::* cpe:2.3:a:qt:qt:3.3.0:::::::* cpe:2.3:a:qt:qt:2.0.2:::::::* cpe:2.3:a:qt:qt:2.0.1:::::::* cpe:2.3:a:qt:qt:2.0.0:::::::* cpe:2.3:a:qt:qt:1.45:::::::* cpe:2.3:a:qt:qt:1.44:::::::* cpe:2.3:a:qt:qt:1.43:::::::* cpe:2.3:a:qt:qt:1.42:::::::* cpe:2.3:a:qt:qt:1.41:::::::* cpe:2.3:a:qt:qt:::::::: cpe:2.3:a:qt:qt::::::android::*	66
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:11.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::	2
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::*	2
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::*	3
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:6.1:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:4.0:::::::*	3
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:::::::*	3

OpenVAS Exploits

Date	Description
2012-07-30	Name : CentOS Update for qt4 CESA-2011:1324 centos5 x86_64 File : nvt/gb_CESA-2011_1324_qt4_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for evolution28-pango CESA-2011:1325 centos4 x86_64 File : nvt/gb_CESA-2011_1325_evolution28-pango_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for pango CESA-2011:1326 centos5 x86_64 File : nvt/gb_CESA-2011_1326_pango_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for frysk CESA-2011:1327 centos4 x86_64 File : nvt/gb_CESA-2011_1327_frysk_centos4_x86_64.nasl
2012-07-16	Name : Ubuntu Update for qt4-x11 USN-1504-1 File : nvt/gb_ubuntu_USN_1504_1.nasl
2012-07-09	Name : RedHat Update for qt RHSA-2011:1323-01 File : nvt/gb_RHSA-2011_1323-01_qt.nasl
2011-09-23	Name : CentOS Update for qt4 CESA-2011:1324 centos5 i386 File : nvt/gb_CESA-2011_1324_qt4_centos5_i386.nasl
2011-09-23	Name : CentOS Update for evolution28-pango CESA-2011:1325 centos4 i386 File : nvt/gb_CESA-2011_1325_evolution28-pango_centos4_i386.nasl
2011-09-23	Name : CentOS Update for pango CESA-2011:1326 centos5 i386 File : nvt/gb_CESA-2011_1326_pango_centos5_i386.nasl
2011-09-23	Name : CentOS Update for frysk CESA-2011:1327 centos4 i386 File : nvt/gb_CESA-2011_1327_frysk_centos4_i386.nasl
2011-09-23	Name : RedHat Update for qt4 RHSA-2011:1324-01 File : nvt/gb_RHSA-2011_1324-01_qt4.nasl
2011-09-23	Name : RedHat Update for evolution28-pango RHSA-2011:1325-01 File : nvt/gb_RHSA-2011_1325-01_evolution28-pango.nasl
2011-09-23	Name : RedHat Update for pango RHSA-2011:1326-01 File : nvt/gb_RHSA-2011_1326-01_pango.nasl
2011-09-23	Name : RedHat Update for frysk RHSA-2011:1327-01 File : nvt/gb_RHSA-2011_1327-01_frysk.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
75652	Qt src/3rdparty/harfbuzz/src/harfbuzz-gpos.c Font Handling Overflow

Nessus® Vulnerability Scanner

Date	Description
2015-05-01	Name : The remote Debian host is missing a security update. File : debian_DLA-210.nasl - Type : ACT_GATHER_INFO
2015-03-26	Name : The remote Debian host is missing a security update. File : debian_DLA-117.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libQtWebKit-devel-110908.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-178.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-179.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_libQtWebKit-devel-110908.nasl - Type : ACT_GATHER_INFO
2013-11-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-14.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1323.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1324.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1325.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1326.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2011-1327.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0669.nasl - Type : ACT_GATHER_INFO
2013-03-24	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0669.nasl - Type : ACT_GATHER_INFO
2013-03-22	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130321_qt_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-03-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0669.nasl - Type : ACT_GATHER_INFO
2013-03-15	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libQtWebKit-devel-130301.nasl - Type : ACT_GATHER_INFO
2013-03-15	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libQtWebKit-devel-130302.nasl - Type : ACT_GATHER_INFO
2013-02-25	Name : The remote Fedora host is missing a security update. File : fedora_2013-1997.nasl - Type : ACT_GATHER_INFO
2013-02-15	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1723-1.nasl - Type : ACT_GATHER_INFO
2013-02-13	Name : The remote Fedora host is missing a security update. File : fedora_2013-2041.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110921_evolution28_pango_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110921_frysk_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110921_pango_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110921_qt4_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110921_qt_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-07-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1504-1.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libQtWebKit-devel-110908.nasl - Type : ACT_GATHER_INFO
2011-09-23	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1325.nasl - Type : ACT_GATHER_INFO
2011-09-23	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2011-1327.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1328.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2011-1327.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1326.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1325.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1324.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1323.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1326.nasl - Type : ACT_GATHER_INFO
2011-09-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1324.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:37:54	Multiple Updates
2013-11-22 13:19:10	First insertion

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	10
CPE ID(s)	81
osvdb(s)	1
Openvas Exploit(s)	14
Nessus® Exploit(s)	38

	Related
9.3	CVE-2011-3193
3.6	CVE-2013-0254
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)