Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-13962 →
DEBIAN-CVE-2020-13962
Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2+dfsg-6"}]}]
Debian:13
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2+dfsg-6"}]}]
Debian:14
qtbase-opensource-src
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.2+dfsg-6"}]}]
Références
- advisory security-tracker.debian.org