QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libqt4-32bitUpgrade libqt4-develUpgrade libqt4-dbus-1Upgrade libqt4-sqlUpgrade libqt4-dbus-1-64bitUpgrade libqt4Upgrade libqt4-devel-docUpgrade libqt4-x11-64bitUpgrade libqt4-64bitUpgrade libqt4-sql-32bitUpgrade libqt4-qt3supportUpgrade libqt4-x11Upgrade libqt4-qt3support-64bitUpgrade libqt4-sql-64bitUpgrade libqt4-x11-32bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-dbus-1-32bit | Feb 17, 2015 | Jan 7, 2008 |
| Ubuntu | — | Upgrade libqt4-core | Nov 8, 2024 | Jan 8, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub