QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service, or trick a service into accepting an invalid client certificate for a user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libqt4-64bitUpgrade libqt4-qt3support-32bitUpgrade libqt4-x11-32bitUpgrade libqt4-x11Upgrade libqt4-x11-64bitUpgrade libqt4-devel-docUpgrade libqt4-qt3support-64bitUpgrade libqt4-dbus-1-32bitUpgrade libqt4-qt3supportUpgrade libqt4-sql-64bitUpgrade libqt4-sql-32bitUpgrade libqt4-32bitUpgrade libqt4-dbus-1Upgrade libqt4-develUpgrade libqt4-sqlUpgrade libqt4Upgrade libqt4-dbus-1-64bit | Feb 17, 2015 | Jan 7, 2008 |
| Ubuntu | — | Upgrade libqt4-core | Nov 8, 2024 | Jan 8, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub