An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-qt5-qtbasealma-upgrade-qt5-qtbase-commonalma-upgrade-qt5-qtbase-develalma-upgrade-qt5-qtbase-examplesalma-upgrade-qt5-qtbase-guialma-upgrade-qt5-qtbase-mysqlalma-upgrade-qt5-qtbase-odbcalma-upgrade-qt5-qtbase-postgresqlalma-upgrade-qt5-qtbase-private-develalma-upgrade-qt5-qtbase-static | May 8, 2024 | Dec 24, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-qt5-qtbaseamazon-linux-ami-2-upgrade-qt5-qtbase-commonamazon-linux-ami-2-upgrade-qt5-qtbase-debuginfoamazon-linux-ami-2-upgrade-qt5-qtbase-develamazon-linux-ami-2-upgrade-qt5-qtbase-docamazon-linux-ami-2-upgrade-qt5-qtbase-examplesamazon-linux-ami-2-upgrade-qt5-qtbase-guiamazon-linux-ami-2-upgrade-qt5-qtbase-mysqlamazon-linux-ami-2-upgrade-qt5-qtbase-odbcamazon-linux-ami-2-upgrade-qt5-qtbase-postgresqlamazon-linux-ami-2-upgrade-qt5-qtbase-staticamazon-linux-ami-2-upgrade-qt5-rpm-macros | Jan 23, 2024 | Dec 24, 2023 | |
| Debian | debian-upgrade-qtbase-opensource-src | May 2, 2024 | Dec 24, 2023 | |
| Freebsd | freebsd-upgrade-package-qt5-networkfreebsd-upgrade-package-qt6-base | Jan 10, 2024 | Jan 7, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtbasegentoo-linux-upgrade-dev-qt-qtnetwork | Feb 19, 2024 | Dec 24, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-qt5-qtbaseoracle-linux-upgrade-qt5-qtbase-commonoracle-linux-upgrade-qt5-qtbase-develoracle-linux-upgrade-qt5-qtbase-examplesoracle-linux-upgrade-qt5-qtbase-guioracle-linux-upgrade-qt5-qtbase-mysqloracle-linux-upgrade-qt5-qtbase-odbcoracle-linux-upgrade-qt5-qtbase-postgresqloracle-linux-upgrade-qt5-qtbase-private-develoracle-linux-upgrade-qt5-qtbase-static | May 7, 2024 | Dec 24, 2023 |
| Redhat_linux | redhat-upgrade-qt5-qtbaseredhat-upgrade-qt5-qtbase-commonredhat-upgrade-qt5-qtbase-debuginforedhat-upgrade-qt5-qtbase-debugsourceredhat-upgrade-qt5-qtbase-develredhat-upgrade-qt5-qtbase-devel-debuginforedhat-upgrade-qt5-qtbase-examplesredhat-upgrade-qt5-qtbase-examples-debuginforedhat-upgrade-qt5-qtbase-guiredhat-upgrade-qt5-qtbase-gui-debuginforedhat-upgrade-qt5-qtbase-mysqlredhat-upgrade-qt5-qtbase-mysql-debuginforedhat-upgrade-qt5-qtbase-odbcredhat-upgrade-qt5-qtbase-odbc-debuginforedhat-upgrade-qt5-qtbase-postgresqlredhat-upgrade-qt5-qtbase-postgresql-debuginforedhat-upgrade-qt5-qtbase-private-develredhat-upgrade-qt5-qtbase-staticredhat-upgrade-qt5-qtbase-tests-debuginfo | May 1, 2024 | Dec 24, 2023 | |
| Rocky_linux | rocky-upgrade-qt5-qtbaserocky-upgrade-qt5-qtbase-debuginforocky-upgrade-qt5-qtbase-debugsourcerocky-upgrade-qt5-qtbase-develrocky-upgrade-qt5-qtbase-devel-debuginforocky-upgrade-qt5-qtbase-examplesrocky-upgrade-qt5-qtbase-examples-debuginforocky-upgrade-qt5-qtbase-guirocky-upgrade-qt5-qtbase-gui-debuginforocky-upgrade-qt5-qtbase-mysqlrocky-upgrade-qt5-qtbase-mysql-debuginforocky-upgrade-qt5-qtbase-odbcrocky-upgrade-qt5-qtbase-odbc-debuginforocky-upgrade-qt5-qtbase-postgresqlrocky-upgrade-qt5-qtbase-postgresql-debuginforocky-upgrade-qt5-qtbase-private-develrocky-upgrade-qt5-qtbase-static | Jul 31, 2025 | May 7, 2025 | |
| Suse | — | suse-upgrade-libqt5-qtbase-common-develsuse-upgrade-libqt5-qtbase-develsuse-upgrade-libqt5-qtbase-examplessuse-upgrade-libqt5-qtbase-examples-32bitsuse-upgrade-libqt5-qtbase-platformtheme-gtk3suse-upgrade-libqt5-qtbase-platformtheme-xdgdesktopportalsuse-upgrade-libqt5-qtbase-private-headers-develsuse-upgrade-libqt5bootstrap-devel-staticsuse-upgrade-libqt5bootstrap-devel-static-32bitsuse-upgrade-libqt5concurrent-develsuse-upgrade-libqt5concurrent-devel-32bitsuse-upgrade-libqt5concurrent5suse-upgrade-libqt5concurrent5-32bitsuse-upgrade-libqt5core-develsuse-upgrade-libqt5core-devel-32bitsuse-upgrade-libqt5core-private-headers-develsuse-upgrade-libqt5core5suse-upgrade-libqt5core5-32bitsuse-upgrade-libqt5dbus-develsuse-upgrade-libqt5dbus-devel-32bitsuse-upgrade-libqt5dbus-private-headers-develsuse-upgrade-libqt5dbus5suse-upgrade-libqt5dbus5-32bitsuse-upgrade-libqt5gui-develsuse-upgrade-libqt5gui-devel-32bitsuse-upgrade-libqt5gui-private-headers-develsuse-upgrade-libqt5gui5suse-upgrade-libqt5gui5-32bitsuse-upgrade-libqt5kmssupport-devel-staticsuse-upgrade-libqt5kmssupport-private-headers-develsuse-upgrade-libqt5network-develsuse-upgrade-libqt5network-devel-32bitsuse-upgrade-libqt5network-private-headers-develsuse-upgrade-libqt5network5suse-upgrade-libqt5network5-32bitsuse-upgrade-libqt5opengl-develsuse-upgrade-libqt5opengl-devel-32bitsuse-upgrade-libqt5opengl-private-headers-develsuse-upgrade-libqt5opengl5suse-upgrade-libqt5opengl5-32bitsuse-upgrade-libqt5openglextensions-devel-staticsuse-upgrade-libqt5openglextensions-devel-static-32bitsuse-upgrade-libqt5platformheaders-develsuse-upgrade-libqt5platformsupport-devel-staticsuse-upgrade-libqt5platformsupport-devel-static-32bitsuse-upgrade-libqt5platformsupport-private-headers-develsuse-upgrade-libqt5printsupport-develsuse-upgrade-libqt5printsupport-devel-32bitsuse-upgrade-libqt5printsupport-private-headers-develsuse-upgrade-libqt5printsupport5suse-upgrade-libqt5printsupport5-32bitsuse-upgrade-libqt5sql-develsuse-upgrade-libqt5sql-devel-32bitsuse-upgrade-libqt5sql-private-headers-develsuse-upgrade-libqt5sql5suse-upgrade-libqt5sql5-32bitsuse-upgrade-libqt5sql5-mysqlsuse-upgrade-libqt5sql5-mysql-32bitsuse-upgrade-libqt5sql5-postgresqlsuse-upgrade-libqt5sql5-postgresql-32bitsuse-upgrade-libqt5sql5-sqlitesuse-upgrade-libqt5sql5-sqlite-32bitsuse-upgrade-libqt5sql5-unixodbcsuse-upgrade-libqt5sql5-unixodbc-32bitsuse-upgrade-libqt5test-develsuse-upgrade-libqt5test-devel-32bitsuse-upgrade-libqt5test-private-headers-develsuse-upgrade-libqt5test5suse-upgrade-libqt5test5-32bitsuse-upgrade-libqt5widgets-develsuse-upgrade-libqt5widgets-devel-32bitsuse-upgrade-libqt5widgets-private-headers-develsuse-upgrade-libqt5widgets5suse-upgrade-libqt5widgets5-32bitsuse-upgrade-libqt5xml-develsuse-upgrade-libqt5xml-devel-32bitsuse-upgrade-libqt5xml5suse-upgrade-libqt5xml5-32bitsuse-upgrade-libqt6concurrent6suse-upgrade-libqt6core6suse-upgrade-libqt6dbus6suse-upgrade-libqt6gui6suse-upgrade-libqt6network6suse-upgrade-libqt6opengl6suse-upgrade-libqt6openglwidgets6suse-upgrade-libqt6printsupport6suse-upgrade-libqt6sql6suse-upgrade-libqt6test6suse-upgrade-libqt6widgets6suse-upgrade-libqt6xml6suse-upgrade-qt6-base-common-develsuse-upgrade-qt6-base-develsuse-upgrade-qt6-base-docs-htmlsuse-upgrade-qt6-base-docs-qchsuse-upgrade-qt6-base-examplessuse-upgrade-qt6-base-private-develsuse-upgrade-qt6-concurrent-develsuse-upgrade-qt6-core-develsuse-upgrade-qt6-core-private-develsuse-upgrade-qt6-dbus-develsuse-upgrade-qt6-dbus-private-develsuse-upgrade-qt6-docs-commonsuse-upgrade-qt6-gui-develsuse-upgrade-qt6-gui-private-develsuse-upgrade-qt6-kmssupport-devel-staticsuse-upgrade-qt6-kmssupport-private-develsuse-upgrade-qt6-network-develsuse-upgrade-qt6-network-private-develsuse-upgrade-qt6-network-tlssuse-upgrade-qt6-networkinformation-glibsuse-upgrade-qt6-networkinformation-nmsuse-upgrade-qt6-opengl-develsuse-upgrade-qt6-opengl-private-develsuse-upgrade-qt6-openglwidgets-develsuse-upgrade-qt6-platformsupport-devel-staticsuse-upgrade-qt6-platformsupport-private-develsuse-upgrade-qt6-platformtheme-gtk3suse-upgrade-qt6-platformtheme-xdgdesktopportalsuse-upgrade-qt6-printsupport-cupssuse-upgrade-qt6-printsupport-develsuse-upgrade-qt6-printsupport-private-develsuse-upgrade-qt6-sql-develsuse-upgrade-qt6-sql-mysqlsuse-upgrade-qt6-sql-postgresqlsuse-upgrade-qt6-sql-private-develsuse-upgrade-qt6-sql-sqlitesuse-upgrade-qt6-sql-unixodbcsuse-upgrade-qt6-test-develsuse-upgrade-qt6-test-private-develsuse-upgrade-qt6-widgets-develsuse-upgrade-qt6-widgets-private-develsuse-upgrade-qt6-xml-develsuse-upgrade-qt6-xml-private-devel | Jan 9, 2024 | Dec 24, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libqt5core5aubuntu-pro-upgrade-libqt5core5t64ubuntu-pro-upgrade-libqt5gui5ubuntu-pro-upgrade-libqt5gui5t64 | Jun 26, 2025 | Dec 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub