[ GLSA 202007-18 ] QtNetwork

[GLSA]

Gentoo Linux Security Advisory

Title: QtNetwork: Denial of service (GLSA 202007-18)
Severity: normal
Exploitable: remote
Date: 2020-07-26
Bug(s): #727604
ID: 202007-18

Synopsis

A vulnerability in QtNetwork could lead to a Denial of Service
condition.


Background

QtNetwork provides a set of APIs for programming applications that use
TCP/IP. It is part of the Qt framework.


Affected Packages

Package: dev-qt/qtnetwork
Vulnerable: < 5.14.2-r1
Unaffected: >= 5.14.2-r1
Architectures: All supported architectures


Description

A flaw was discovered in QtNetwork’s handling of OpenSSL protocol
errors.


Impact

An attacker could cause a possible Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All QtNetwork users should upgrade to the latest version: