{"id":"CVE-2017-15011","details":"The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers to cause a denial of service (application crash) via an unspecified string.","modified":"2026-07-08T05:51:27.161726514Z","published":"2017-10-04T01:29:03.433Z","database_specific":{"unresolved_ranges":[{"vendor_product":"qt:qt","cpes":["cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.0.0"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"https://hackinparis.com/data/slides/2017/2017_Cohen_Gil_The_forgotten_interface_Windows_named_pipes.pdf"},{"type":"ADVISORY","url":"https://www.youtube.com/watch?v=m6zISgWPGGY"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qt5","events":[{"introduced":"c21bee55a5444248fa785b9d3acd631b5c889476"},{"last_affected":"26ef6f7c13a704f8f52050216c7676b1229ff9e6"}],"database_specific":{"cpe":["cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.0"},{"last_affected":"5.1.0"},{"introduced":"5.2.0"},{"last_affected":"5.2.0"},{"introduced":"5.3.0"},{"last_affected":"5.3.0"},{"introduced":"5.4.0"},{"last_affected":"5.4.0"},{"introduced":"5.5.0"},{"last_affected":"5.5.0"},{"introduced":"5.6.0"},{"last_affected":"5.6.0"},{"introduced":"5.7.0"},{"last_affected":"5.7.0"},{"introduced":"5.8.0"},{"last_affected":"5.8.0"},{"introduced":"5.9.0"},{"last_affected":"5.9.0"},{"introduced":"5.10.0"},{"last_affected":"5.10.0"},{"introduced":"5.10.1"},{"last_affected":"5.10.1"},{"introduced":"5.11.0"},{"last_affected":"5.11.0"},{"introduced":"5.11.1"},{"last_affected":"5.11.1"},{"introduced":"5.11.2"},{"last_affected":"5.11.2"},{"introduced":"5.11.3"},{"last_affected":"5.11.3"},{"introduced":"5.12.0"},{"last_affected":"5.12.0"},{"introduced":"5.12.1"},{"last_affected":"5.12.1"},{"introduced":"5.12.2"},{"last_affected":"5.12.2"},{"introduced":"5.12.3"},{"last_affected":"5.12.3"},{"introduced":"5.12.4"},{"last_affected":"5.12.4"},{"introduced":"5.13.0"},{"last_affected":"5.13.0"},{"introduced":"5.14.0"},{"last_affected":"5.14.0"}],"source":"CPE_STRING"}}],"versions":["5.1.0","5.10.0","5.10.1","5.11.0","5.11.1","5.11.2","5.11.3","5.12.0","5.12.1","5.12.2","5.12.3","5.12.4","5.13.0","5.14.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.7.0","5.8.0","5.9.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15011.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qtbase","events":[{"introduced":"3bf50a7db9a1add66fb66b7a1f9c1d3b038c5e7f"},{"last_affected":"2a887a517eaaa2c5324aecf3b919899b7a86ff4a"}],"database_specific":{"cpe":["cpe:2.3:a:qt:qt:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.7.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.8.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.9.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.10.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.10.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.2:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.11.3:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.1:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.2:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.3:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.12.4:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.13.0:*:*:*:*:*:*:*","cpe:2.3:a:qt:qt:5.14.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.0.0"},{"introduced":"5.0.1"},{"last_affected":"5.0.1"},{"introduced":"5.1.0"},{"last_affected":"5.1.0"},{"introduced":"5.2.0"},{"last_affected":"5.2.0"},{"introduced":"5.3.0"},{"last_affected":"5.3.0"},{"introduced":"5.4.0"},{"last_affected":"5.4.0"},{"introduced":"5.5.0"},{"last_affected":"5.5.0"},{"introduced":"5.6.0"},{"last_affected":"5.6.0"},{"introduced":"5.7.0"},{"last_affected":"5.7.0"},{"introduced":"5.8.0"},{"last_affected":"5.8.0"},{"introduced":"5.9.0"},{"last_affected":"5.9.0"},{"introduced":"5.10.0"},{"last_affected":"5.10.0"},{"introduced":"5.10.1"},{"last_affected":"5.10.1"},{"introduced":"5.11.0"},{"last_affected":"5.11.0"},{"introduced":"5.11.1"},{"last_affected":"5.11.1"},{"introduced":"5.11.2"},{"last_affected":"5.11.2"},{"introduced":"5.11.3"},{"last_affected":"5.11.3"},{"introduced":"5.12.0"},{"last_affected":"5.12.0"},{"introduced":"5.12.1"},{"last_affected":"5.12.1"},{"introduced":"5.12.2"},{"last_affected":"5.12.2"},{"introduced":"5.12.3"},{"last_affected":"5.12.3"},{"introduced":"5.12.4"},{"last_affected":"5.12.4"},{"introduced":"5.13.0"},{"last_affected":"5.13.0"},{"introduced":"5.14.0"},{"last_affected":"5.14.0"}],"source":"CPE_STRING"}}],"versions":["5.0.0","5.0.1","5.1.0","5.10.0","5.10.1","5.11.0","5.11.1","5.11.2","5.11.3","5.12.0","5.12.1","5.12.2","5.12.3","5.12.4","5.13.0","5.14.0","5.2.0","5.3.0","5.4.0","5.5.0","5.6.0","5.7.0","5.8.0","5.9.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15011.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}