ALPINE-CVE-2023-32762

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2023-32762

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2023-32762

Upstream

CVE-2023-32762

Published

2023-05-28T23:15:09Z

Modified

2026-11-03T06:32:42Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Summary

[none]

Details

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

References

https://security.alpinelinux.org/vuln/CVE-2023-32762

Affected packages

Alpine:v3.18

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.19

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.20

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.21

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.22

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.23

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

Alpine:v3.24

qt5-qtbase

Package

Name: qt5-qtbase
Purl: pkg:apk/alpine/qt5-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.15.9_git20230505-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"

qt6-qtbase

Package

Name: qt6-qtbase
Purl: pkg:apk/alpine/qt6-qtbase?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.5.0-r5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-32762.json"