CVE-2020-13962

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of…

published June 8, 2020

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02987 · 87.2th percentile
Published
2020-06-08T23:14Z
EPSS history
Timeline
  • 08 JUN 23:14Z
    Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of…
    cvelistv5