Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-21035 →

DEBIAN-CVE-2018-21035

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 qtwebsockets-opensource-src

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.1-2"}]}]

Debian:13 qtwebsockets-opensource-src

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.1-2"}]}]

Debian:14 qtwebsockets-opensource-src

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.1-2"}]}]

Références

advisory security-tracker.debian.org