Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qtbase-staticUpgrade qt5-qttools-static | May 4, 2022 | Jun 9, 2020 |
| Centos_linux | — | Upgrade qt5-qttools-devel-debuginfoUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qttools-libs-designercomponents-debuginfoUpgrade qt5-doctools-debuginfoUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-develUpgrade qt5-designerUpgrade qt5-qtbase-postgresqlUpgrade qt5-assistantUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qttools-libs-designerUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-assistant-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-doctoolsUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-guiUpgrade qt5-qttoolsUpgrade qt5-qttools-commonUpgrade qt5-qtwebsockets-tests-debuginfoUpgrade qt5-qtbase-mysqlUpgrade qt5-qdbusviewerUpgrade qt5-designer-debuginfoUpgrade qt5-qttools-tests-debuginfoUpgrade qt5-qttools-libs-helpUpgrade qt5-linguistUpgrade qt5-qttools-develUpgrade qt5-qdbusviewer-debuginfoUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtwebsockets-develUpgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-qtwebsocketsUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-qttools-examplesUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qttools-debuginfoUpgrade qt5-qtbase-private-develUpgrade qt5-linguist-debuginfoUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qttools-examples-debuginfoUpgrade qt5-qttools-libs-designer-debuginfoUpgrade qt5-qttools-libs-help-debuginfoUpgrade qt5-qtbaseUpgrade qt5-qttools-debugsourceUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-devel-debuginfo | Nov 5, 2020 | Jun 9, 2020 |
| Debian | — | Upgrade qtbase-opensource-src | Jul 30, 2024 | Jun 9, 2020 |
| Gentoo Linux | — | Upgrade dev-qt/qtnetwork. | Jul 28, 2020 | Jun 9, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/qt5 to version 5.12.9-11.4.25.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Jun 9, 2020 |
| Oracle_linux | — | Upgrade qt5-qtbase-odbcUpgrade qt5-qtbase-staticUpgrade qt5-qttools-commonUpgrade qt5-qtwebsockets-develUpgrade qt5-qtbase-develUpgrade qt5-qttools-staticUpgrade qt5-qtbaseUpgrade qt5-qttoolsUpgrade qt5-qdbusviewerUpgrade qt5-qtbase-examplesUpgrade qt5-assistantUpgrade qt5-qttools-libs-helpUpgrade qt5-qtbase-postgresqlUpgrade qt5-designerUpgrade qt5-linguistUpgrade qt5-doctoolsUpgrade qt5-qttools-develUpgrade qt5-qtbase-private-develUpgrade qt5-qttools-examplesUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qttools-libs-designerUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-guiUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qtwebsockets | Nov 12, 2020 | Jun 9, 2020 |
| Redhat_linux | — | Upgrade qt5-linguistUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtbaseUpgrade qt5-qtbase-mysqlUpgrade qt5-doctoolsUpgrade qt5-qttools-libs-designer-debuginfoUpgrade qt5-qttools-debugsourceUpgrade qt5-qttools-staticUpgrade qt5-qtbase-guiUpgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-assistant-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-develUpgrade qt5-designerUpgrade qt5-qdbusviewerUpgrade qt5-qttoolsUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qttools-libs-designercomponentsUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-examples-debuginfoUpgrade qt5-qtbase-odbcUpgrade qt5-assistantUpgrade qt5-qdbusviewer-debuginfoUpgrade qt5-qttools-tests-debuginfoUpgrade qt5-qtwebsockets-tests-debuginfoUpgrade qt5-qttools-libs-designercomponents-debuginfoUpgrade qt5-qttools-commonUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-postgresqlUpgrade qt5-qttools-libs-helpUpgrade qt5-qttools-examples-debuginfoUpgrade qt5-qttools-devel-debuginfoUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-linguist-debuginfoUpgrade qt5-qtwebsockets-develUpgrade qt5-qtbase-debuginfoUpgrade qt5-qttools-develUpgrade qt5-qtbase-devel-debuginfoUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtwebsocketsUpgrade qt5-doctools-debuginfoUpgrade qt5-qtbase-commonUpgrade qt5-qttools-examplesUpgrade qt5-qttools-libs-help-debuginfoUpgrade qt5-designer-debuginfoUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qttools-libs-designerUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qttools-debuginfo | Nov 5, 2020 | Jun 9, 2020 |
| Rocky_linux | — | Upgrade qt5-qtwebsockets-examples-debuginfoUpgrade qt5-qtwebsockets-devel-debuginfoUpgrade qt5-qtwebsockets-debugsourceUpgrade qt5-qtwebsockets-debuginfoUpgrade qt5-qtwebsocketsUpgrade qt5-qtwebsockets-examplesUpgrade qt5-qtwebsockets-devel | Mar 12, 2024 | Jun 9, 2020 |
| Suse | — | Upgrade libqt5test5-32bitUpgrade libqt5kmssupport-private-headers-develUpgrade libqt5concurrent-devel-32bitUpgrade libqt5network-devel-32bitUpgrade libqt5gui-devel-32bitUpgrade libqt5sql5-sqliteUpgrade libqt5sql5-unixodbcUpgrade libqt5opengl-develUpgrade libqt5core-private-headers-develUpgrade libqt5test-private-headers-develUpgrade libqt5sql5-postgresql-32bitUpgrade libqt5-qtbase-examplesUpgrade libqt5test5Upgrade libqt5platformheaders-develUpgrade libqt5core5Upgrade libqt5printsupport-private-headers-develUpgrade libqt5xml-develUpgrade libqt5dbus-devel-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5core5-32bitUpgrade libqt5printsupport5-32bitUpgrade libqt5printsupport-develUpgrade libqt5gui5Upgrade libqt5opengl5Upgrade libqt5printsupport-devel-32bitUpgrade libqt5printsupport5Upgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5bootstrap-devel-static-32bitUpgrade libqt5test-devel-32bitUpgrade libqt5network5Upgrade libqt5sql-develUpgrade libqt5dbus5Upgrade libqt5kmssupport-devel-staticUpgrade libqt5network-develUpgrade libqt5bootstrap-devel-staticUpgrade libqt5dbus5-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade libqt5opengl-devel-32bitUpgrade libqt5openglextensions-devel-staticUpgrade libqt5core-develUpgrade libqt5sql5Upgrade libqt5sql5-unixodbc-32bitUpgrade libqt5concurrent5-32bitUpgrade libqt5widgets-private-headers-develUpgrade libqt5network5-32bitUpgrade libqt5sql5-mysqlUpgrade libqt5widgets5-32bitUpgrade libqt5core-devel-32bitUpgrade libqt5dbus-develUpgrade libqt5sql-private-headers-develUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5sql-devel-32bitUpgrade libqt5network-private-headers-develUpgrade libqt5dbus-private-headers-develUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5-qtbase-develUpgrade libqt5gui-develUpgrade libqt5concurrent5Upgrade libqt5xml-devel-32bitUpgrade libqt5widgets-devel-32bitUpgrade libqt5xml5Upgrade libqt5-qtbase-common-develUpgrade libqt5gui-private-headers-develUpgrade libqt5opengl5-32bitUpgrade libqt5xml5-32bitUpgrade libqt5sql5-mysql-32bitUpgrade libqt5sql5-postgresqlUpgrade libqt5concurrent-develUpgrade libqt5sql5-32bitUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt5widgets-develUpgrade libqt5platformsupport-devel-staticUpgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade libqt5gui5-32bitUpgrade libqt5widgets5Upgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5test-devel | Sep 2, 2020 | Jun 9, 2020 |
| Ubuntu | — | Upgrade libqt5gui5t64 (Ubuntu Pro)Upgrade libqt5core5a (Ubuntu Pro)Upgrade libqt5gui5 (Ubuntu Pro)Upgrade libqt5core5t64 (Ubuntu Pro) | Jun 26, 2025 | Jun 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub