MGASA-2021-0270

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0270.html

Import Source

https://advisories.mageia.org/MGASA-2021-0270.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0270

Related

CVE-2018-21035

Published

2021-06-23T17:11:28Z

Modified

2021-06-23T15:23:13Z

Summary

Updated qtwebsockets5 packages fix a security vulnerability

Details

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption) (CVE-2018-21035).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / qtwebsockets5

Package

Name: qtwebsockets5
Purl: pkg:rpm/mageia/qtwebsockets5?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.12.6-1.1.mga7

Ecosystem specific

{
    "section": "core"
}