QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libqt4-sqlUpgrade libqt4-dbus-1Upgrade libqt4-dbus-1-64bitUpgrade libqt4-develUpgrade libqt4Upgrade libqt4-32bitUpgrade libqt4-x11-32bitUpgrade libqt4-sql-32bitUpgrade libqt4-qt3supportUpgrade libqt4-sql-64bitUpgrade libqt4-qt3support-64bitUpgrade libqt4-x11Upgrade libqt4-64bitUpgrade libqt4-x11-64bitUpgrade libqt4-devel-docUpgrade libqt4-qt3support-32bitUpgrade libqt4-dbus-1-32bit | Feb 17, 2015 | Jan 7, 2008 |
| Ubuntu | — | Upgrade libqt4-core | Nov 8, 2024 | Jan 8, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub