An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qt5-qtbaseUpgrade qt6-qtbase | Aug 22, 2024 | May 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-examplesUpgrade qt5-qtbase-docUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-develUpgrade qt5-qtbaseUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-postgresqlUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-common | Sep 8, 2023 | May 28, 2023 |
| Debian | — | Upgrade qt6-baseUpgrade qtbase-opensource-src | May 2, 2024 | May 28, 2023 |
| F5 Big Ip | — | — | Dec 3, 2024 | May 28, 2023 |
| Gentoo Linux | — | Upgrade dev-qt/qtnetwork.Upgrade dev-qt/qtbase. | Feb 19, 2024 | May 28, 2023 |
| Suse | — | Upgrade qt6-xml-private-develUpgrade libqt5opengl5Upgrade qt6-base-private-develUpgrade libqt5-qtbase-examplesUpgrade qt6-gui-private-develUpgrade libqt5concurrent-develUpgrade libQt6DBus6Upgrade libqt5bootstrap-devel-static-32bitUpgrade libqt5openglextensions-devel-static-32bitUpgrade libQt6Sql6Upgrade libqt5platformsupport-private-headers-develUpgrade qt6-xml-develUpgrade libqt5xml-develUpgrade qt6-opengl-develUpgrade qt6-sql-unixODBCUpgrade libQt6PrintSupport6Upgrade qt6-printsupport-private-develUpgrade libqt5dbus-devel-32bitUpgrade qt6-printsupport-develUpgrade libqt5gui-develUpgrade qt6-base-docs-htmlUpgrade libqt5opengl-devel-32bitUpgrade libqt5sql5-sqliteUpgrade libqt5sql5-unixodbcUpgrade libqt5opengl-private-headers-develUpgrade libqt5platformsupport-devel-staticUpgrade libqt5dbus5-32bitUpgrade libqt5test-private-headers-develUpgrade libqt5dbus-develUpgrade qt6-base-docs-qchUpgrade libQt6Core6Upgrade libqt5gui5Upgrade qt6-network-develUpgrade qt6-test-private-develUpgrade qt6-printsupport-cupsUpgrade libqt5network-devel-32bitUpgrade libqt5test-devel-32bitUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5bootstrap-devel-staticUpgrade libqt5sql-private-headers-develUpgrade libqt5opengl-develUpgrade libqt5platformsupport-devel-static-32bitUpgrade libqt5concurrent5-32bitUpgrade libqt5printsupport-private-headers-develUpgrade libqt5kmssupport-private-headers-develUpgrade qt6-concurrent-develUpgrade libqt5test5-32bitUpgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-kmssupport-private-develUpgrade qt6-widgets-private-develUpgrade libQt6Xml6Upgrade libqt5sql5Upgrade libQt6Concurrent6Upgrade qt6-kmssupport-devel-staticUpgrade qt6-sql-develUpgrade libqt5dbus-private-headers-develUpgrade libqt5sql5-mysql-32bitUpgrade libQt6Widgets6Upgrade libqt5sql5-mysqlUpgrade qt6-sql-sqliteUpgrade libqt5xml5-32bitUpgrade qt6-gui-develUpgrade qt6-sql-private-develUpgrade libQt6Network6Upgrade qt6-openglwidgets-develUpgrade qt6-platformsupport-devel-staticUpgrade libqt5concurrent5Upgrade libqt5core-devel-32bitUpgrade libqt5gui-devel-32bitUpgrade libqt5core-private-headers-develUpgrade libQt6Test6Upgrade libqt5sql5-postgresql-32bitUpgrade qt6-networkinformation-nmUpgrade qt6-widgets-develUpgrade libQt6OpenGLWidgets6Upgrade libqt5printsupport5Upgrade libqt5network-develUpgrade qt6-platformtheme-gtk3Upgrade libqt5printsupport-develUpgrade libqt5openglextensions-devel-staticUpgrade libqt5gui5-32bitUpgrade libqt5core-develUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5test-develUpgrade qt6-core-private-develUpgrade qt6-dbus-private-develUpgrade libqt5sql-develUpgrade libqt5dbus5Upgrade qt6-core-develUpgrade qt6-base-develUpgrade libQt6Gui6Upgrade libqt5widgets5Upgrade libqt5sql5-unixodbc-32bitUpgrade libqt5printsupport-devel-32bitUpgrade libqt5gui-private-headers-develUpgrade libqt5opengl5-32bitUpgrade libqt5widgets-private-headers-develUpgrade libqt5sql-devel-32bitUpgrade libqt5core5Upgrade libqt5concurrent-devel-32bitUpgrade qt6-test-develUpgrade qt6-platformsupport-private-develUpgrade qt6-opengl-private-develUpgrade qt6-base-examplesUpgrade libqt5network5-32bitUpgrade libqt5xml-devel-32bitUpgrade libqt5widgets-develUpgrade libqt5test5Upgrade libqt5-qtbase-common-develUpgrade qt6-sql-postgresqlUpgrade libqt5sql5-postgresqlUpgrade libqt5-qtbase-develUpgrade qt6-network-private-develUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libQt6OpenGL6Upgrade libqt5widgets-devel-32bitUpgrade libqt5network-private-headers-develUpgrade libqt5kmssupport-devel-staticUpgrade qt6-sql-mysqlUpgrade qt6-dbus-develUpgrade libqt5-qtbase-platformtheme-xdgdesktopportalUpgrade qt6-network-tlsUpgrade libqt5core5-32bitUpgrade libqt5widgets5-32bitUpgrade libqt5sql5-32bitUpgrade libqt5network5Upgrade qt6-networkinformation-glibUpgrade libqt5xml5Upgrade qt6-docs-commonUpgrade libqt5printsupport5-32bitUpgrade libqt5platformheaders-develUpgrade libqt5-qtbase-private-headers-develUpgrade qt6-base-common-devel | Jul 27, 2023 | May 28, 2023 |
| Ubuntu | — | Upgrade libqt5core5a (Ubuntu Pro)Upgrade libqt5gui5 (Ubuntu Pro) | Jul 25, 2025 | May 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub