Lucene search
MitreCVELIST:CVE-2018-21035HistoryFeb 28, 2020 - 7:17 p.m.
CVE-2018-21035
2020-02-2819:17:43
mitre
www.cve.org
7
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
45.7%
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
Related
debiancve
debiancve
CVE-2018-21035
2020-02-28 21:15:12
prion
prion
Memory corruption
2020-02-28 21:15:00
nessus
nessus
NewStart CGSL MAIN 6.02 : qt5-qtwebsockets Vulnerability (NS-SA-2021-0085)
2021-03-10 00:00:00
RHEL 7 : qt5-qtwebsockets (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : qt5-qtwebsockets (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
CVE-2018-21035
2020-02-28 21:15:12
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
cbl_mariner
cbl_mariner
CVE-2018-21035 affecting package qt5-qtsvg 5.12.11-4
2021-11-03 19:21:13
CVE-2018-21035 affecting package qt5-qtsvg for versions less than 5.12.11-3
2022-04-26 19:57:36
ubuntucve
ubuntucve
CVE-2018-21035
2020-02-28 00:00:00
mageia
mageia
Updated qtwebsockets5 packages fix a security vulnerability
2021-06-23 20:11:28
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0270)
2022-01-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-11-05 03:17:51
redhatcve
redhatcve
CVE-2018-21035
2020-03-06 10:40:57
cve
cve
CVE-2018-21035
2020-02-28 21:15:12
nvd
nvd
CVE-2018-21035
2020-02-28 21:15:12
oraclelinux
oraclelinux
qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-10 00:00:00
rocky
rocky
qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
almalinux
almalinux
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
2020-11-03 12:27:18
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1959
2021-07-02 18:04:13
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
45.7%
Related for CVELIST:CVE-2018-21035