p PatchFirst

CVE-2020-13962

CVE-2020-13962

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)

CVSS 7.5 · High · EPSS 3.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qtbase-opensource-src Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.14.2+dfsg-6

    Update to 5.14.2+dfsg-6

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.14.2+dfsg-6

    Update to 5.14.2+dfsg-6

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.14.2+dfsg-6

    Update to 5.14.2+dfsg-6

  • qtbase-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-4ubuntu1
    • 5.12.5+dfsg-2
    • 5.12.5+dfsg-8
    • 5.12.5+dfsg-8build1
    • 5.12.5+dfsg-9build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu2.1
    • 5.12.8+dfsg-0ubuntu2.1+esm1
    • 5.12.8+dfsg-0ubuntu2.1+esm2
    Affected ranges
    • ECOSYSTEM: < 5.12.8+dfsg-0ubuntu2.1+esm3

    Update to 5.12.8+dfsg-0ubuntu2.1+esm3

Original sources

Check your server →