PT-2020-13805
CVE-2020-13962
·
تاريخ النشر
2020-06-08
·
تاريخ التحديث
2026-03-05
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Qt versions 5.12.2 through 5.14.2
Description
The issue mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails.
Recommendations
For Qt versions 5.12.2 through 5.14.2, consider updating to a version where this issue is resolved, as the current version can cause a denial of service to QSslSocket users due to the mishandling of OpenSSL's error queue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾