7.5

CVE-2020-13962

Exploit

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)

Data is provided by the National Vulnerability Database (NVD)
Mumble ≫ Mumble Version1.3.0 Update-
Qt ≫ Qt Version >= 5.12.2 < 5.12.9
Qt ≫ Qt Version >= 5.13.0 <= 5.13.2
Qt ≫ Qt Version >= 5.14.0 <= 5.14.2
Fedoraproject ≫ Fedora Version31
Fedoraproject ≫ Fedora Version32
Fedoraproject ≫ Fedora Version33
Opensuse ≫ Leap Version15.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.57% 0.809
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
https://bugreports.qt.io/browse/QTBUG-83450
Vendor Advisory
Issue Tracking
https://github.com/mumble-voip/mumble/issues/3679
Patch
Third Party Advisory
Exploit
Issue Tracking