CVE-2024-39936
04.07.2024, 21:15
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
| Vendor | Product | Version |
|---|---|---|
| qt | qt | 𝑥 < 5.15.18 |
| qt | qt | 6.0.0 ≤ 𝑥 < 6.2.13 |
| qt | qt | 6.3.0 ≤ 𝑥 < 6.5.7 |
| qt | qt | 6.6.0 ≤ 𝑥 < 6.7.3 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qt6-base |
| ||||||||||||
| qtbase-opensource-src |
| ||||||||||||
| qtbase-opensource-src-gles |
|
Ubuntu Releases