CVEvulnerability
CVE-2012-6093
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-02-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
Affected configurations
• qt qt (<= 4.6.5)
• qt qt 4.6.0
• qt qt 4.6.1
• qt qt 4.6.2
• qt qt 4.6.3
• qt qt 4.6.4
• qt qt 4.7.0
• qt qt 4.7.1
• qt qt 4.7.2
• qt qt 4.7.3
• qt qt 4.7.4
• qt qt 4.7.5
• qt qt 4.7.6
• qt qt 4.8.0
• qt qt 4.8.1
• qt qt 4.8.2
• qt qt 4.8.3
• qt qt 4.8.4
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• opensuse opensuse 11.4
• opensuse opensuse 12.2
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582 bugs.debian.org
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html lists.opensuse.org
- http://lists.qt-project.org/pipermail/announce/2013-January/000020.html Vendor Advisory
- http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29 qt.gitorious.org
- http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29 qt.gitorious.org
- http://secunia.com/advisories/52217 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/01/04/6 www.openwall.com
- http://www.ubuntu.com/usn/USN-1723-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=891955 bugzilla.redhat.com
- https://codereview.qt-project.org/#change%2C42461 codereview.qt-project.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582 bugs.debian.org
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html lists.opensuse.org
- http://lists.qt-project.org/pipermail/announce/2013-January/000020.html Vendor Advisory
- http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29 qt.gitorious.org
- http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29 qt.gitorious.org
- http://secunia.com/advisories/52217 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/01/04/6 www.openwall.com
- http://www.ubuntu.com/usn/USN-1723-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=891955 bugzilla.redhat.com
- https://codereview.qt-project.org/#change%2C42461 codereview.qt-project.org