p PatchFirst

CVE-2024-39936

CVE-2024-39936

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

CVSS 8.6 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • qt6-base Debian:12

    Versions
    • 6.10.2+dfsg-1
    • 6.10.2+dfsg-10
    • 6.10.2+dfsg-10+hurd.1
    • 6.10.2+dfsg-11
    • 6.10.2+dfsg-12
    • 6.10.2+dfsg-13
    • 6.10.2+dfsg-14
    • 6.10.2+dfsg-15
    • 6.10.2+dfsg-16
    • 6.10.2+dfsg-2
    • 6.10.2+dfsg-3
    • 6.10.2+dfsg-4
    • 6.10.2+dfsg-5
    • 6.10.2+dfsg-6
    • 6.10.2+dfsg-7
    • 6.10.2+dfsg-7+hurd.1
    • 6.10.2+dfsg-8
    • 6.10.2+dfsg-9
    • 6.11.2+dfsg-1
    • 6.11.2+dfsg-2
    • 6.11.2+dfsg-3
    • 6.11.2+dfsg-4
    • 6.4.2+dfsg-10
    • 6.4.2+dfsg-11
    • 6.4.2+dfsg-11~bpo11+1
    • 6.4.2+dfsg-12
    • 6.4.2+dfsg-13
    • 6.4.2+dfsg-14
    • 6.4.2+dfsg-15
    • 6.4.2+dfsg-16
    • 6.4.2+dfsg-17
    • 6.4.2+dfsg-18
    • 6.4.2+dfsg-18+loong64
    • 6.4.2+dfsg-19
    • 6.4.2+dfsg-20
    • 6.4.2+dfsg-21
    • 6.4.2+dfsg-21.1
    • 6.6.0+dfsg-1
    • 6.6.0+dfsg-2
    • 6.6.0+dfsg-3
    • 6.6.0+dfsg-4
    • 6.6.0+dfsg-5
    • 6.6.0+dfsg-6
    • 6.6.1+dfsg-1
    • 6.6.1+dfsg-2
    • 6.6.1+dfsg-3
    • 6.6.1+dfsg-4
    • 6.6.1+dfsg-5
    • 6.6.1+dfsg-6
    • 6.6.2+dfsg-1
    • 6.6.2+dfsg-10
    • 6.6.2+dfsg-11
    • 6.6.2+dfsg-12
    • 6.6.2+dfsg-2
    • 6.6.2+dfsg-3
    • 6.6.2+dfsg-4
    • 6.6.2+dfsg-5
    • 6.6.2+dfsg-6
    • 6.6.2+dfsg-7
    • 6.6.2+dfsg-8
    • 6.6.2+dfsg-9
    • 6.7.2+dfsg-1
    • 6.7.2+dfsg-2
    • 6.7.2+dfsg-3
    • 6.7.2+dfsg-4
    • 6.7.2+dfsg-4+m68k
    • 6.7.2+dfsg-5
    • 6.7.2+dfsg-6
    • 6.8.2+dfsg-1
    • 6.8.2+dfsg-10
    • 6.8.2+dfsg-10.1
    • 6.8.2+dfsg-2
    • 6.8.2+dfsg-3
    • 6.8.2+dfsg-4
    • 6.8.2+dfsg-5
    • 6.8.2+dfsg-5+m68k
    • 6.8.2+dfsg-6
    • 6.8.2+dfsg-7
    • 6.8.2+dfsg-8
    • 6.8.2+dfsg-9
    • 6.9.1+dfsg-1
    • 6.9.1+dfsg-2
    • 6.9.1+dfsg-3
    • 6.9.1+dfsg-4
    • 6.9.1+dfsg-5
    • 6.9.2+dfsg-1
    • 6.9.2+dfsg-2
    • 6.9.2+dfsg-3
    • 6.9.2+dfsg-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-base Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.8.2+dfsg-5

    Update to 6.8.2+dfsg-5

  • qt6-base Debian:14

    Affected ranges
    • ECOSYSTEM: < 6.8.2+dfsg-5

    Update to 6.8.2+dfsg-5

  • qtbase-opensource-src Debian:12

    Versions
    • 5.15.8+dfsg-11
    • 5.15.8+dfsg-11+deb12u1
    • 5.15.8+dfsg-11+deb12u2
    Affected ranges
    • ECOSYSTEM: < 5.15.8+dfsg-11+deb12u3

    Update to 5.15.8+dfsg-11+deb12u3

  • qtbase-opensource-src Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.15.13+dfsg-3

    Update to 5.15.13+dfsg-3

  • qtbase-opensource-src Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.15.13+dfsg-3

    Update to 5.15.13+dfsg-3

  • qtbase-opensource-src-gles Debian:12

    Versions
    • 5.15.10+dfsg-1
    • 5.15.10+dfsg-2
    • 5.15.10+dfsg-3
    • 5.15.10+dfsg-4
    • 5.15.10+dfsg-5
    • 5.15.10+dfsg-6
    • 5.15.12+dfsg-1
    • 5.15.13+dfsg-1
    • 5.15.13+dfsg-2
    • 5.15.15+dfsg-1
    • 5.15.15+dfsg-2
    • 5.15.17+dfsg-1
    • 5.15.17+dfsg-2
    • 5.15.18+dfsg-1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg-2
    • 5.15.8+dfsg-3
    • 5.15.9+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Debian:13

    Versions
    • 5.15.15+dfsg-2
    • 5.15.17+dfsg-1
    • 5.15.17+dfsg-2
    • 5.15.18+dfsg-1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src-gles Debian:14

    Versions
    • 5.15.15+dfsg-2
    • 5.15.17+dfsg-1
    • 5.15.17+dfsg-2
    • 5.15.18+dfsg-1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-4ubuntu1
    • 5.12.5+dfsg-2
    • 5.12.5+dfsg-8
    • 5.12.5+dfsg-8build1
    • 5.12.5+dfsg-9build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu2.1
    • 5.12.8+dfsg-0ubuntu2.1+esm1
    • 5.12.8+dfsg-0ubuntu2.1+esm2
    Affected ranges
    • ECOSYSTEM: < 5.12.8+dfsg-0ubuntu2.1+esm3

    Update to 5.12.8+dfsg-0ubuntu2.1+esm3

  • qtbase-opensource-src Ubuntu:22.04:LTS

    Versions
    • 5.15.2+dfsg-12
    • 5.15.2+dfsg-13
    • 5.15.2+dfsg-14
    • 5.15.2+dfsg-14ubuntu1
    • 5.15.2+dfsg-14ubuntu3
    • 5.15.2+dfsg-15
    • 5.15.3+dfsg-1
    • 5.15.3+dfsg-2
    • 5.15.3+dfsg-2ubuntu0.1
    • 5.15.3+dfsg-2ubuntu0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.2+dfsg-12
    • 5.15.2+dfsg-13
    • 5.15.2+dfsg-14
    • 5.15.2+dfsg-14ubuntu1
    • 5.15.2+dfsg-14ubuntu3
    • 5.15.2+dfsg-15
    • 5.15.3+dfsg-1
    • 5.15.3+dfsg-2
    • 5.15.3+dfsg-2ubuntu0.1
    • 5.15.3+dfsg-2ubuntu0.2
    • 5.15.3+dfsg-2ubuntu0.2+esm1
    • 5.15.3+dfsg-2ubuntu0.2+esm2
    Affected ranges
    • ECOSYSTEM: < 5.15.3+dfsg-2ubuntu0.2+esm3

    Update to 5.15.3+dfsg-2ubuntu0.2+esm3

  • qtbase-opensource-src Ubuntu:24.04:LTS

    Versions
    • 5.15.10+dfsg-3
    • 5.15.10+dfsg-5
    • 5.15.10+dfsg-5ubuntu1
    • 5.15.12+dfsg-1ubuntu1
    • 5.15.12+dfsg-3ubuntu1
    • 5.15.12+dfsg-3ubuntu6
    • 5.15.12+dfsg-3ubuntu7
    • 5.15.13+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtbase-opensource-src Ubuntu:Pro:24.04:LTS

    Versions
    • 5.15.10+dfsg-3
    • 5.15.10+dfsg-5
    • 5.15.10+dfsg-5ubuntu1
    • 5.15.12+dfsg-1ubuntu1
    • 5.15.12+dfsg-3ubuntu1
    • 5.15.12+dfsg-3ubuntu6
    • 5.15.12+dfsg-3ubuntu7
    • 5.15.13+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 5.15.13+dfsg-1ubuntu1+esm1

    Update to 5.15.13+dfsg-1ubuntu1+esm1

Original sources

Check your server →