Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-qt5-qtbase-staticalma-upgrade-qt5-qttools-static | May 4, 2022 | Jun 9, 2020 | |
| Centos_linux | — | centos-upgrade-qt5-assistantcentos-upgrade-qt5-assistant-debuginfocentos-upgrade-qt5-designercentos-upgrade-qt5-designer-debuginfocentos-upgrade-qt5-doctoolscentos-upgrade-qt5-doctools-debuginfocentos-upgrade-qt5-linguistcentos-upgrade-qt5-linguist-debuginfocentos-upgrade-qt5-qdbusviewercentos-upgrade-qt5-qdbusviewer-debuginfocentos-upgrade-qt5-qtbasecentos-upgrade-qt5-qtbase-commoncentos-upgrade-qt5-qtbase-debuginfocentos-upgrade-qt5-qtbase-debugsourcecentos-upgrade-qt5-qtbase-develcentos-upgrade-qt5-qtbase-devel-debuginfocentos-upgrade-qt5-qtbase-examplescentos-upgrade-qt5-qtbase-examples-debuginfocentos-upgrade-qt5-qtbase-guicentos-upgrade-qt5-qtbase-gui-debuginfocentos-upgrade-qt5-qtbase-mysqlcentos-upgrade-qt5-qtbase-mysql-debuginfocentos-upgrade-qt5-qtbase-odbccentos-upgrade-qt5-qtbase-odbc-debuginfocentos-upgrade-qt5-qtbase-postgresqlcentos-upgrade-qt5-qtbase-postgresql-debuginfocentos-upgrade-qt5-qtbase-private-develcentos-upgrade-qt5-qtbase-tests-debuginfocentos-upgrade-qt5-qttoolscentos-upgrade-qt5-qttools-commoncentos-upgrade-qt5-qttools-debuginfocentos-upgrade-qt5-qttools-debugsourcecentos-upgrade-qt5-qttools-develcentos-upgrade-qt5-qttools-devel-debuginfocentos-upgrade-qt5-qttools-examplescentos-upgrade-qt5-qttools-examples-debuginfocentos-upgrade-qt5-qttools-libs-designercentos-upgrade-qt5-qttools-libs-designer-debuginfocentos-upgrade-qt5-qttools-libs-designercomponentscentos-upgrade-qt5-qttools-libs-designercomponents-debuginfocentos-upgrade-qt5-qttools-libs-helpcentos-upgrade-qt5-qttools-libs-help-debuginfocentos-upgrade-qt5-qttools-tests-debuginfocentos-upgrade-qt5-qtwebsocketscentos-upgrade-qt5-qtwebsockets-debuginfocentos-upgrade-qt5-qtwebsockets-debugsourcecentos-upgrade-qt5-qtwebsockets-develcentos-upgrade-qt5-qtwebsockets-devel-debuginfocentos-upgrade-qt5-qtwebsockets-examplescentos-upgrade-qt5-qtwebsockets-examples-debuginfocentos-upgrade-qt5-qtwebsockets-tests-debuginfo | Nov 5, 2020 | Jun 9, 2020 |
| Debian | debian-upgrade-qtbase-opensource-src | Jul 30, 2024 | Jun 9, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtnetwork | Jul 28, 2020 | Jun 9, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-desktop-qt5-5-12-9-11-4-25-0-1-75-3 | Jan 19, 2021 | Jun 9, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-qt5-assistantoracle-linux-upgrade-qt5-designeroracle-linux-upgrade-qt5-doctoolsoracle-linux-upgrade-qt5-linguistoracle-linux-upgrade-qt5-qdbusvieweroracle-linux-upgrade-qt5-qtbaseoracle-linux-upgrade-qt5-qtbase-commonoracle-linux-upgrade-qt5-qtbase-develoracle-linux-upgrade-qt5-qtbase-examplesoracle-linux-upgrade-qt5-qtbase-guioracle-linux-upgrade-qt5-qtbase-mysqloracle-linux-upgrade-qt5-qtbase-odbcoracle-linux-upgrade-qt5-qtbase-postgresqloracle-linux-upgrade-qt5-qtbase-private-develoracle-linux-upgrade-qt5-qtbase-staticoracle-linux-upgrade-qt5-qttoolsoracle-linux-upgrade-qt5-qttools-commonoracle-linux-upgrade-qt5-qttools-develoracle-linux-upgrade-qt5-qttools-examplesoracle-linux-upgrade-qt5-qttools-libs-designeroracle-linux-upgrade-qt5-qttools-libs-designercomponentsoracle-linux-upgrade-qt5-qttools-libs-helporacle-linux-upgrade-qt5-qttools-staticoracle-linux-upgrade-qt5-qtwebsocketsoracle-linux-upgrade-qt5-qtwebsockets-develoracle-linux-upgrade-qt5-qtwebsockets-examples | Nov 12, 2020 | Jun 9, 2020 |
| Redhat_linux | redhat-upgrade-qt5-assistantredhat-upgrade-qt5-assistant-debuginforedhat-upgrade-qt5-designerredhat-upgrade-qt5-designer-debuginforedhat-upgrade-qt5-doctoolsredhat-upgrade-qt5-doctools-debuginforedhat-upgrade-qt5-linguistredhat-upgrade-qt5-linguist-debuginforedhat-upgrade-qt5-qdbusviewerredhat-upgrade-qt5-qdbusviewer-debuginforedhat-upgrade-qt5-qtbaseredhat-upgrade-qt5-qtbase-commonredhat-upgrade-qt5-qtbase-debuginforedhat-upgrade-qt5-qtbase-debugsourceredhat-upgrade-qt5-qtbase-develredhat-upgrade-qt5-qtbase-devel-debuginforedhat-upgrade-qt5-qtbase-examplesredhat-upgrade-qt5-qtbase-examples-debuginforedhat-upgrade-qt5-qtbase-guiredhat-upgrade-qt5-qtbase-gui-debuginforedhat-upgrade-qt5-qtbase-mysqlredhat-upgrade-qt5-qtbase-mysql-debuginforedhat-upgrade-qt5-qtbase-odbcredhat-upgrade-qt5-qtbase-odbc-debuginforedhat-upgrade-qt5-qtbase-postgresqlredhat-upgrade-qt5-qtbase-postgresql-debuginforedhat-upgrade-qt5-qtbase-private-develredhat-upgrade-qt5-qtbase-staticredhat-upgrade-qt5-qtbase-tests-debuginforedhat-upgrade-qt5-qttoolsredhat-upgrade-qt5-qttools-commonredhat-upgrade-qt5-qttools-debuginforedhat-upgrade-qt5-qttools-debugsourceredhat-upgrade-qt5-qttools-develredhat-upgrade-qt5-qttools-devel-debuginforedhat-upgrade-qt5-qttools-examplesredhat-upgrade-qt5-qttools-examples-debuginforedhat-upgrade-qt5-qttools-libs-designerredhat-upgrade-qt5-qttools-libs-designer-debuginforedhat-upgrade-qt5-qttools-libs-designercomponentsredhat-upgrade-qt5-qttools-libs-designercomponents-debuginforedhat-upgrade-qt5-qttools-libs-helpredhat-upgrade-qt5-qttools-libs-help-debuginforedhat-upgrade-qt5-qttools-staticredhat-upgrade-qt5-qttools-tests-debuginforedhat-upgrade-qt5-qtwebsocketsredhat-upgrade-qt5-qtwebsockets-debuginforedhat-upgrade-qt5-qtwebsockets-debugsourceredhat-upgrade-qt5-qtwebsockets-develredhat-upgrade-qt5-qtwebsockets-devel-debuginforedhat-upgrade-qt5-qtwebsockets-examplesredhat-upgrade-qt5-qtwebsockets-examples-debuginforedhat-upgrade-qt5-qtwebsockets-tests-debuginfo | Nov 5, 2020 | Jun 9, 2020 | |
| Rocky_linux | rocky-upgrade-qt5-qtwebsocketsrocky-upgrade-qt5-qtwebsockets-debuginforocky-upgrade-qt5-qtwebsockets-debugsourcerocky-upgrade-qt5-qtwebsockets-develrocky-upgrade-qt5-qtwebsockets-devel-debuginforocky-upgrade-qt5-qtwebsockets-examplesrocky-upgrade-qt5-qtwebsockets-examples-debuginfo | Mar 12, 2024 | Jun 9, 2020 | |
| Suse | — | suse-upgrade-libqt5-qtbase-common-develsuse-upgrade-libqt5-qtbase-develsuse-upgrade-libqt5-qtbase-examplessuse-upgrade-libqt5-qtbase-examples-32bitsuse-upgrade-libqt5-qtbase-platformtheme-gtk3suse-upgrade-libqt5-qtbase-platformtheme-xdgdesktopportalsuse-upgrade-libqt5-qtbase-private-headers-develsuse-upgrade-libqt5bootstrap-devel-staticsuse-upgrade-libqt5bootstrap-devel-static-32bitsuse-upgrade-libqt5concurrent-develsuse-upgrade-libqt5concurrent-devel-32bitsuse-upgrade-libqt5concurrent5suse-upgrade-libqt5concurrent5-32bitsuse-upgrade-libqt5core-develsuse-upgrade-libqt5core-devel-32bitsuse-upgrade-libqt5core-private-headers-develsuse-upgrade-libqt5core5suse-upgrade-libqt5core5-32bitsuse-upgrade-libqt5dbus-develsuse-upgrade-libqt5dbus-devel-32bitsuse-upgrade-libqt5dbus-private-headers-develsuse-upgrade-libqt5dbus5suse-upgrade-libqt5dbus5-32bitsuse-upgrade-libqt5gui-develsuse-upgrade-libqt5gui-devel-32bitsuse-upgrade-libqt5gui-private-headers-develsuse-upgrade-libqt5gui5suse-upgrade-libqt5gui5-32bitsuse-upgrade-libqt5kmssupport-devel-staticsuse-upgrade-libqt5kmssupport-private-headers-develsuse-upgrade-libqt5network-develsuse-upgrade-libqt5network-devel-32bitsuse-upgrade-libqt5network-private-headers-develsuse-upgrade-libqt5network5suse-upgrade-libqt5network5-32bitsuse-upgrade-libqt5opengl-develsuse-upgrade-libqt5opengl-devel-32bitsuse-upgrade-libqt5opengl-private-headers-develsuse-upgrade-libqt5opengl5suse-upgrade-libqt5opengl5-32bitsuse-upgrade-libqt5openglextensions-devel-staticsuse-upgrade-libqt5openglextensions-devel-static-32bitsuse-upgrade-libqt5platformheaders-develsuse-upgrade-libqt5platformsupport-devel-staticsuse-upgrade-libqt5platformsupport-devel-static-32bitsuse-upgrade-libqt5platformsupport-private-headers-develsuse-upgrade-libqt5printsupport-develsuse-upgrade-libqt5printsupport-devel-32bitsuse-upgrade-libqt5printsupport-private-headers-develsuse-upgrade-libqt5printsupport5suse-upgrade-libqt5printsupport5-32bitsuse-upgrade-libqt5sql-develsuse-upgrade-libqt5sql-devel-32bitsuse-upgrade-libqt5sql-private-headers-develsuse-upgrade-libqt5sql5suse-upgrade-libqt5sql5-32bitsuse-upgrade-libqt5sql5-mysqlsuse-upgrade-libqt5sql5-mysql-32bitsuse-upgrade-libqt5sql5-postgresqlsuse-upgrade-libqt5sql5-postgresql-32bitsuse-upgrade-libqt5sql5-sqlitesuse-upgrade-libqt5sql5-sqlite-32bitsuse-upgrade-libqt5sql5-unixodbcsuse-upgrade-libqt5sql5-unixodbc-32bitsuse-upgrade-libqt5test-develsuse-upgrade-libqt5test-devel-32bitsuse-upgrade-libqt5test-private-headers-develsuse-upgrade-libqt5test5suse-upgrade-libqt5test5-32bitsuse-upgrade-libqt5widgets-develsuse-upgrade-libqt5widgets-devel-32bitsuse-upgrade-libqt5widgets-private-headers-develsuse-upgrade-libqt5widgets5suse-upgrade-libqt5widgets5-32bitsuse-upgrade-libqt5xml-develsuse-upgrade-libqt5xml-devel-32bitsuse-upgrade-libqt5xml5suse-upgrade-libqt5xml5-32bit | Sep 2, 2020 | Jun 9, 2020 |
| Ubuntu | ubuntu-pro-upgrade-libqt5core5aubuntu-pro-upgrade-libqt5core5t64ubuntu-pro-upgrade-libqt5gui5ubuntu-pro-upgrade-libqt5gui5t64 | Jun 26, 2025 | Jun 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub