An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qt5-qtbase-odbcUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-develUpgrade qt5-qtbase | May 8, 2024 | Dec 24, 2023 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtbase-develUpgrade qt5-qtbase-examplesUpgrade qt5-rpm-macrosUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-docUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase | Jan 23, 2024 | Dec 24, 2023 |
| Debian | — | Upgrade qtbase-opensource-src-glesUpgrade qt6-baseUpgrade qtbase-opensource-src | May 2, 2024 | Dec 24, 2023 |
| Freebsd | — | Upgrade qt6-baseUpgrade qt5-network | Jan 10, 2024 | Jan 7, 2024 |
| Gentoo Linux | — | Upgrade dev-qt/qtnetwork.Upgrade dev-qt/qtbase. | Feb 19, 2024 | Dec 24, 2023 |
| Oracle_linux | — | Upgrade qt5-qtbase-staticUpgrade qt5-qtbaseUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-develUpgrade qt5-qtbase-postgresql | May 7, 2024 | Dec 24, 2023 |
| Redhat_linux | — | Upgrade qt5-qtbase-devel-debuginfoUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-commonUpgrade qt5-qtbase-tests-debuginfoUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-examples-debuginfoNo solution existsUpgrade qt5-qtbase-develUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qtbase-guiUpgrade qt5-qtbase | May 1, 2024 | Dec 24, 2023 |
| Rocky_linux | — | Upgrade qt5-qtbase-mysqlUpgrade qt5-qtbase-odbcUpgrade qt5-qtbase-mysql-debuginfoUpgrade qt5-qtbase-devel-debuginfoUpgrade qt5-qtbase-guiUpgrade qt5-qtbase-gui-debuginfoUpgrade qt5-qtbase-postgresqlUpgrade qt5-qtbase-debuginfoUpgrade qt5-qtbase-debugsourceUpgrade qt5-qtbase-develUpgrade qt5-qtbase-odbc-debuginfoUpgrade qt5-qtbase-private-develUpgrade qt5-qtbase-postgresql-debuginfoUpgrade qt5-qtbaseUpgrade qt5-qtbase-examplesUpgrade qt5-qtbase-staticUpgrade qt5-qtbase-examples-debuginfo | Jul 31, 2025 | May 7, 2025 |
| Suse | — | Upgrade libqt5test5-32bitUpgrade libqt5sql5-postgresql-32bitUpgrade libqt5platformheaders-develUpgrade qt6-platformtheme-gtk3Upgrade qt6-docs-commonUpgrade libqt5network-private-headers-develUpgrade libqt5openglextensions-devel-static-32bitUpgrade libqt5sql-private-headers-develUpgrade libqt5core5-32bitUpgrade libqt5sql5-32bitUpgrade libqt5sql5-mysqlUpgrade qt6-base-private-develUpgrade qt6-printsupport-cupsUpgrade libqt5sql-devel-32bitUpgrade libqt5dbus-develUpgrade libqt5-qtbase-examples-32bitUpgrade libqt5bootstrap-devel-static-32bitUpgrade qt6-core-private-develUpgrade libqt5widgets-develUpgrade qt6-platformsupport-devel-staticUpgrade libQt6Widgets6Upgrade libqt5test5Upgrade libqt5sql-develUpgrade qt6-base-develUpgrade qt6-gui-develUpgrade libQt6Xml6Upgrade libqt5printsupport-private-headers-develUpgrade libqt5network5Upgrade libqt5widgets-private-headers-develUpgrade qt6-widgets-develUpgrade libQt6Test6Upgrade qt6-sql-postgresqlUpgrade libqt5dbus-devel-32bitUpgrade libqt5opengl-private-headers-develUpgrade libqt5test-devel-32bitUpgrade qt6-networkinformation-nmUpgrade libqt5xml-develUpgrade qt6-test-private-develUpgrade qt6-base-docs-qchUpgrade qt6-concurrent-develUpgrade libqt5concurrent-devel-32bitUpgrade libqt5printsupport5-32bitUpgrade libqt5printsupport-develUpgrade libqt5opengl-develUpgrade libqt5printsupport-devel-32bitUpgrade libqt5widgets5-32bitUpgrade libqt5core5Upgrade qt6-printsupport-private-develUpgrade libqt5core-develUpgrade qt6-core-develUpgrade libqt5gui5Upgrade qt6-gui-private-develUpgrade qt6-sql-unixODBCUpgrade libQt6Core6Upgrade libqt5sql5-unixodbcUpgrade libqt5network-devel-32bitUpgrade libqt5opengl5Upgrade libqt5printsupport5Upgrade libqt5test-develUpgrade libqt5kmssupport-private-headers-develUpgrade qt6-openglwidgets-develUpgrade libqt5gui-devel-32bitUpgrade libqt5platformsupport-private-headers-develUpgrade libqt5platformsupport-devel-static-32bitUpgrade qt6-network-tlsUpgrade qt6-sql-sqliteUpgrade libqt5dbus5-32bitUpgrade qt6-platformtheme-xdgdesktopportalUpgrade qt6-opengl-develUpgrade libQt6Sql6Upgrade libQt6DBus6Upgrade libqt5sql5-sqliteUpgrade libqt5gui-private-headers-develUpgrade libqt5concurrent-develUpgrade qt6-network-develUpgrade libqt5sql5-postgresqlUpgrade libqt5openglextensions-devel-staticUpgrade libqt5core-devel-32bitUpgrade libqt5concurrent5Upgrade qt6-widgets-private-develUpgrade libqt5widgets-devel-32bitUpgrade qt6-base-examplesUpgrade libqt5xml-devel-32bitUpgrade libqt5-qtbase-platformtheme-gtk3Upgrade libqt5-qtbase-common-develUpgrade libqt5sql5Upgrade libqt5gui-develUpgrade libqt5concurrent5-32bitUpgrade libqt5-qtbase-private-headers-develUpgrade qt6-network-private-develUpgrade qt6-kmssupport-private-develUpgrade libQt6PrintSupport6Upgrade libQt6Gui6Upgrade libqt5bootstrap-devel-staticUpgrade qt6-xml-develUpgrade qt6-opengl-private-develUpgrade qt6-base-common-develUpgrade libQt6Network6Upgrade libqt5sql5-unixodbc-32bitUpgrade libqt5network-develUpgrade libqt5dbus-private-headers-develUpgrade qt6-printsupport-develUpgrade qt6-dbus-develUpgrade libqt5core-private-headers-develUpgrade libqt5opengl5-32bitUpgrade libqt5-qtbase-develUpgrade qt6-sql-develUpgrade libqt5sql5-mysql-32bitUpgrade libqt5platformsupport-devel-staticUpgrade libqt5dbus5Upgrade qt6-xml-private-develUpgrade qt6-platformsupport-private-develUpgrade qt6-networkinformation-glibUpgrade libQt6OpenGLWidgets6Upgrade libqt5gui5-32bitUpgrade qt6-kmssupport-devel-staticUpgrade libqt5widgets5Upgrade libQt6OpenGL6Upgrade libQt6Concurrent6Upgrade libqt5xml5-32bitUpgrade libqt5test-private-headers-develUpgrade libqt5sql5-sqlite-32bitUpgrade libqt5network5-32bitUpgrade libqt5kmssupport-devel-staticUpgrade qt6-sql-private-develUpgrade qt6-sql-mysqlUpgrade libqt5opengl-devel-32bitUpgrade libqt5xml5Upgrade qt6-test-develUpgrade qt6-base-docs-htmlUpgrade qt6-dbus-private-develUpgrade libqt5-qtbase-examplesUpgrade libqt5-qtbase-platformtheme-xdgdesktopportal | Jan 9, 2024 | Dec 24, 2023 |
| Ubuntu | — | Upgrade libqt5core5a (Ubuntu Pro)Upgrade libqt5gui5 (Ubuntu Pro)Upgrade libqt5core5t64 (Ubuntu Pro)Upgrade libqt5gui5t64 (Ubuntu Pro) | Jun 26, 2025 | Dec 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub