ALT-PU-2024-2819-1
Package qt6-websockets updated to version 6.6.2-alt1 for branch sisyphus in task 341139.
Closed vulnerabilities
Published: 2023-12-13
BDU:2024-00093
Уязвимость реализации протокола HTTP2 (network/access/http2/hpacktable.cpp) кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызывать отказ в обслуживании
Severity: MEDIUM (6.2)
Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2023-12-25
Modified: 2025-03-21
Modified: 2025-03-21
CVE-2023-51714
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- https://codereview.qt-project.org/c/qt/qtbase/+/524864
- https://codereview.qt-project.org/c/qt/qtbase/+/524864
- https://codereview.qt-project.org/c/qt/qtbase/+/524865/3
- https://codereview.qt-project.org/c/qt/qtbase/+/524865/3
- [debian-lts-announce] 20240430 [SECURITY] [DLA 3805-1] qtbase-opensource-src security update
- [debian-lts-announce] 20240430 [SECURITY] [DLA 3805-1] qtbase-opensource-src security update