7.5

CVE-2020-13962

Exploit
Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mumble ≫ Mumble Version1.3.0 Update-
Qt ≫ Qt Version >= 5.12.2 < 5.12.9
Qt ≫ Qt Version >= 5.13.0 <= 5.13.2
Qt ≫ Qt Version >= 5.14.0 <= 5.14.2
Fedoraproject ≫ Fedora Version31
Fedoraproject ≫ Fedora Version32
Fedoraproject ≫ Fedora Version33
Opensuse ≫ Leap Version15.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.01% 0.857
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html
Third Party Advisory
Mailing List
https://bugreports.qt.io/browse/QTBUG-83450
Vendor Advisory
Issue Tracking
https://github.com/mumble-voip/mumble/issues/3679
Patch
Third Party Advisory
Exploit
Issue Tracking
https://github.com/mumble-voip/mumble/pull/4032
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X6EDPIIAQPVP2CHL2CHDHJ25EECA7UE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQJDBZUYMMF4R5QQKD2HTIKQU2NSKO63/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3IZY7LKJ6NAXQDFYFR4S7L5BBHYK53K/
https://security.gentoo.org/glsa/202007-18
Third Party Advisory