CVE-2023-34410

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

References

Affected packages

Git / github.com/qt/qtbase

Affected ranges

Type

GIT

Repo

https://github.com/qt/qtbase

Events

Introduced

fc9ae22c88dd085c7c31599037132fc756feeb04

Fixed

ca725ad9c5331a657c328bf624f2b0b713623276

Introduced

fc9cda5f08ac848e88f63dd4a07c08b2fbc6bf17

Fixed

f131837a9fcc83dcfb70a0a91b1baacb6ccf14a2

Introduced

9554d315aa74eaba1726405ee09117e2ebc6111f

Fixed

af457a9f0f7eb1a2a7d11f495da508faab91a442

Database specific

{
    "versions": [
        {
            "introduced": "5.13.0"
        },
        {
            "fixed": "5.15.15"
        },
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.2.9"
        },
        {
            "introduced": "6.3.0"
        },
        {
            "fixed": "6.5.2"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34410.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "38"
            }
        ]
    }
]