CVE-2010-2621

Опубликовано: 02 июл. 2010

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request.

Ссылки

http://aluigi.org/adv/qtsslame-adv.txt
http://aluigi.org/poc/qtsslame.zip
Exploit
http://osvdb.org/65860
http://qt.gitorious.org/qt/qt/commit/c25c7c9bdfade6b906f37ac8bad44f6f0de57597
http://secunia.com/advisories/40389
Vendor Advisory
http://secunia.com/advisories/46410
Vendor Advisory
http://www.securityfocus.com/bid/41250
Exploit
http://www.vupen.com/english/advisories/2010/1657
Vendor Advisory
https://hermes.opensuse.org/messages/12056605
http://aluigi.org/adv/qtsslame-adv.txt
http://aluigi.org/poc/qtsslame.zip
Exploit
http://osvdb.org/65860
http://qt.gitorious.org/qt/qt/commit/c25c7c9bdfade6b906f37ac8bad44f6f0de57597
http://secunia.com/advisories/40389
Vendor Advisory
http://secunia.com/advisories/46410
Vendor Advisory
http://www.securityfocus.com/bid/41250
Exploit
http://www.vupen.com/english/advisories/2010/1657
Vendor Advisory
https://hermes.opensuse.org/messages/12056605

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digia:qt:*:*:*:*:*:*:*:*

Версия до 4.6.3 (включая)

cpe:2.3:a:qt:qt:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.1.5:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.4:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.3.5:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.4.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.4.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.4.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12

Средний

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2010-2621

ubuntu

больше 15 лет назад

CVE-2010-2621

redhat

больше 15 лет назад

CVE-2010-2621

debian

больше 15 лет назад

The QSslSocketBackendPrivate::transmit function in src_network_ssl_qss ...

GHSA-m9q6-wcwv-qqmp

github

больше 3 лет назад

EPSS

Процентиль: 94%

0.12

Средний

5 Medium

CVSS2

Дефекты

CWE-20