An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-qt5-qtbasealpine-linux-upgrade-qt6-qtbase | Aug 22, 2024 | May 28, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-qt5-qtbaseamazon-linux-ami-2-upgrade-qt5-qtbase-commonamazon-linux-ami-2-upgrade-qt5-qtbase-debuginfoamazon-linux-ami-2-upgrade-qt5-qtbase-develamazon-linux-ami-2-upgrade-qt5-qtbase-docamazon-linux-ami-2-upgrade-qt5-qtbase-examplesamazon-linux-ami-2-upgrade-qt5-qtbase-guiamazon-linux-ami-2-upgrade-qt5-qtbase-mysqlamazon-linux-ami-2-upgrade-qt5-qtbase-odbcamazon-linux-ami-2-upgrade-qt5-qtbase-postgresqlamazon-linux-ami-2-upgrade-qt5-qtbase-staticamazon-linux-ami-2-upgrade-qt5-rpm-macros | Sep 8, 2023 | May 28, 2023 | |
| Debian | debian-upgrade-qt6-basedebian-upgrade-qtbase-opensource-src | May 2, 2024 | May 28, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-qt-qtbasegentoo-linux-upgrade-dev-qt-qtnetwork | Feb 19, 2024 | May 28, 2023 | |
| Suse | — | suse-upgrade-libqt5-qtbase-common-develsuse-upgrade-libqt5-qtbase-develsuse-upgrade-libqt5-qtbase-examplessuse-upgrade-libqt5-qtbase-examples-32bitsuse-upgrade-libqt5-qtbase-platformtheme-gtk3suse-upgrade-libqt5-qtbase-platformtheme-xdgdesktopportalsuse-upgrade-libqt5-qtbase-private-headers-develsuse-upgrade-libqt5bootstrap-devel-staticsuse-upgrade-libqt5bootstrap-devel-static-32bitsuse-upgrade-libqt5concurrent-develsuse-upgrade-libqt5concurrent-devel-32bitsuse-upgrade-libqt5concurrent5suse-upgrade-libqt5concurrent5-32bitsuse-upgrade-libqt5core-develsuse-upgrade-libqt5core-devel-32bitsuse-upgrade-libqt5core-private-headers-develsuse-upgrade-libqt5core5suse-upgrade-libqt5core5-32bitsuse-upgrade-libqt5dbus-develsuse-upgrade-libqt5dbus-devel-32bitsuse-upgrade-libqt5dbus-private-headers-develsuse-upgrade-libqt5dbus5suse-upgrade-libqt5dbus5-32bitsuse-upgrade-libqt5gui-develsuse-upgrade-libqt5gui-devel-32bitsuse-upgrade-libqt5gui-private-headers-develsuse-upgrade-libqt5gui5suse-upgrade-libqt5gui5-32bitsuse-upgrade-libqt5kmssupport-devel-staticsuse-upgrade-libqt5kmssupport-private-headers-develsuse-upgrade-libqt5network-develsuse-upgrade-libqt5network-devel-32bitsuse-upgrade-libqt5network-private-headers-develsuse-upgrade-libqt5network5suse-upgrade-libqt5network5-32bitsuse-upgrade-libqt5opengl-develsuse-upgrade-libqt5opengl-devel-32bitsuse-upgrade-libqt5opengl-private-headers-develsuse-upgrade-libqt5opengl5suse-upgrade-libqt5opengl5-32bitsuse-upgrade-libqt5openglextensions-devel-staticsuse-upgrade-libqt5openglextensions-devel-static-32bitsuse-upgrade-libqt5platformheaders-develsuse-upgrade-libqt5platformsupport-devel-staticsuse-upgrade-libqt5platformsupport-devel-static-32bitsuse-upgrade-libqt5platformsupport-private-headers-develsuse-upgrade-libqt5printsupport-develsuse-upgrade-libqt5printsupport-devel-32bitsuse-upgrade-libqt5printsupport-private-headers-develsuse-upgrade-libqt5printsupport5suse-upgrade-libqt5printsupport5-32bitsuse-upgrade-libqt5sql-develsuse-upgrade-libqt5sql-devel-32bitsuse-upgrade-libqt5sql-private-headers-develsuse-upgrade-libqt5sql5suse-upgrade-libqt5sql5-32bitsuse-upgrade-libqt5sql5-mysqlsuse-upgrade-libqt5sql5-mysql-32bitsuse-upgrade-libqt5sql5-postgresqlsuse-upgrade-libqt5sql5-postgresql-32bitsuse-upgrade-libqt5sql5-sqlitesuse-upgrade-libqt5sql5-sqlite-32bitsuse-upgrade-libqt5sql5-unixodbcsuse-upgrade-libqt5sql5-unixodbc-32bitsuse-upgrade-libqt5test-develsuse-upgrade-libqt5test-devel-32bitsuse-upgrade-libqt5test-private-headers-develsuse-upgrade-libqt5test5suse-upgrade-libqt5test5-32bitsuse-upgrade-libqt5widgets-develsuse-upgrade-libqt5widgets-devel-32bitsuse-upgrade-libqt5widgets-private-headers-develsuse-upgrade-libqt5widgets5suse-upgrade-libqt5widgets5-32bitsuse-upgrade-libqt5xml-develsuse-upgrade-libqt5xml-devel-32bitsuse-upgrade-libqt5xml5suse-upgrade-libqt5xml5-32bitsuse-upgrade-libqt6concurrent6suse-upgrade-libqt6core6suse-upgrade-libqt6dbus6suse-upgrade-libqt6gui6suse-upgrade-libqt6network6suse-upgrade-libqt6opengl6suse-upgrade-libqt6openglwidgets6suse-upgrade-libqt6printsupport6suse-upgrade-libqt6sql6suse-upgrade-libqt6test6suse-upgrade-libqt6widgets6suse-upgrade-libqt6xml6suse-upgrade-qt6-base-common-develsuse-upgrade-qt6-base-develsuse-upgrade-qt6-base-docs-htmlsuse-upgrade-qt6-base-docs-qchsuse-upgrade-qt6-base-examplessuse-upgrade-qt6-base-private-develsuse-upgrade-qt6-concurrent-develsuse-upgrade-qt6-core-develsuse-upgrade-qt6-core-private-develsuse-upgrade-qt6-dbus-develsuse-upgrade-qt6-dbus-private-develsuse-upgrade-qt6-docs-commonsuse-upgrade-qt6-gui-develsuse-upgrade-qt6-gui-private-develsuse-upgrade-qt6-kmssupport-devel-staticsuse-upgrade-qt6-kmssupport-private-develsuse-upgrade-qt6-network-develsuse-upgrade-qt6-network-private-develsuse-upgrade-qt6-network-tlssuse-upgrade-qt6-networkinformation-glibsuse-upgrade-qt6-networkinformation-nmsuse-upgrade-qt6-opengl-develsuse-upgrade-qt6-opengl-private-develsuse-upgrade-qt6-openglwidgets-develsuse-upgrade-qt6-platformsupport-devel-staticsuse-upgrade-qt6-platformsupport-private-develsuse-upgrade-qt6-platformtheme-gtk3suse-upgrade-qt6-platformtheme-xdgdesktopportalsuse-upgrade-qt6-printsupport-cupssuse-upgrade-qt6-printsupport-develsuse-upgrade-qt6-printsupport-private-develsuse-upgrade-qt6-sql-develsuse-upgrade-qt6-sql-mysqlsuse-upgrade-qt6-sql-postgresqlsuse-upgrade-qt6-sql-private-develsuse-upgrade-qt6-sql-sqlitesuse-upgrade-qt6-sql-unixodbcsuse-upgrade-qt6-test-develsuse-upgrade-qt6-test-private-develsuse-upgrade-qt6-widgets-develsuse-upgrade-qt6-widgets-private-develsuse-upgrade-qt6-xml-develsuse-upgrade-qt6-xml-private-devel | Jul 27, 2023 | May 28, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libqt5core5aubuntu-pro-upgrade-libqt5gui5 | Jul 25, 2025 | May 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub