CVE-2020-13962

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13962
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-13962
Downstream
Related
Published
2020-06-09T00:15:10.123Z
Modified
2026-07-08T05:56:32.570200069Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "31"
                },
                {
                    "last_affected": "31"
                },
                {
                    "introduced": "32"
                },
                {
                    "last_affected": "32"
                },
                {
                    "introduced": "33"
                },
                {
                    "last_affected": "33"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpes": [
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "opensuse:leap",
            "extracted_events": [
                {
                    "introduced": "15.2"
                },
                {
                    "last_affected": "15.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/mumble-voip/mumble

Affected ranges

Type
GIT
Repo
https://github.com/mumble-voip/mumble
Events
Introduced
78fefb4a2094bb22919598b87ca1628bb9eeda60
Last affected
78fefb4a2094bb22919598b87ca1628bb9eeda60
Database specific 
{
    "cpe": "cpe:2.3:a:mumble:mumble:1.3.0:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.3.0-NA"
        },
        {
            "last_affected": "1.3.0-NA"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.3.0
1.3.0-NA

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"

Git / github.com/qt/qt5

Affected ranges

Type
GIT
Repo
https://github.com/qt/qt5
Events
Introduced
7100c54887416c99d9f4f08b81e61f1bd03fda3c
Fixed
e16b5baa08efe8cda43fae9d00d287d314770675
Introduced
644f8b7006737a89bfa171fcc7df15a312d678d7
Last affected
aebccd288510a85a2de6c12cbc5e5d9980f3df75
Introduced
26ef6f7c13a704f8f52050216c7676b1229ff9e6
Last affected
2e7ba38d18768d2a926bf78bf253fec71ba5fe15
Database specific 
{
    "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "5.12.2"
        },
        {
            "fixed": "5.12.9"
        },
        {
            "introduced": "5.13.0"
        },
        {
            "last_affected": "5.13.2"
        },
        {
            "introduced": "5.14.0"
        },
        {
            "last_affected": "5.14.2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"

Git / github.com/qt/qtbase

Affected ranges

Type
GIT
Repo
https://github.com/qt/qtbase
Events
Introduced
856fb1ab44722f5165fb6b5dec0bd748006acd10
Fixed
823ed71e220ebde07970dd61c04bb47b01dd06c4
Introduced
fc9ae22c88dd085c7c31599037132fc756feeb04
Last affected
a7a24784eeba6747d319eb911583bdd99ef38cdb
Introduced
2a887a517eaaa2c5324aecf3b919899b7a86ff4a
Last affected
3a6d8df5219653b043bd642668cee193f563ec84
Database specific 
{
    "cpe": "cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.12.2"
        },
        {
            "fixed": "5.12.9"
        },
        {
            "introduced": "5.13.0"
        },
        {
            "last_affected": "5.13.2"
        },
        {
            "introduced": "5.14.0"
        },
        {
            "last_affected": "5.14.2"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"