Lucene search

MitreCVE-2024-39936

HistoryJul 04, 2024 - 9:15 p.m.

CVE-2024-39936

2024-07-0421:15:10

CWE-367

mitre

web.nvd.nist.gov

cve-2024-39936

http2

security

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed…

Affected configurations

Nvd

Node

qtqtRange<5.15.18

qtqtRange6.0.0–6.2.13

qtqtRange6.3.0–6.5.7

qtqtRange6.6.0–6.7.3

VendorProductVersionCPE
qtqt*cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qt	qt	*	cpe:2.3:a:qt:qt::::::::

References

codereview.qt-project.org/c/qt/qtbase/+/571601

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

Related for CVE-2024-39936