Lucene search
UbuntuUSN-1628-1HistoryNov 08, 2012 - 12:00 a.m.
Qt vulnerability
2012-11-0800:00:00
ubuntu.com
74
5.5 Medium
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.9%
Releases
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 10.04
Packages
- qt4-x11 - Qt 4 libraries
Details
Juliano Rizzo and Thai Duong discovered a flaw in the Transport Layer
Security (TLS) protocol when it is used with data compression. If an
attacker were able to perform a machine-in-the-middle attack, this flaw
could be exploited to view sensitive information. This update disables
TLS data compression in Qt by default.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.04 | noarch | libqt4-network | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-assistant | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-core | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-dbg | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-dbus | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-declarative | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-declarative-folderlistmodel | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-declarative-gestures | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-declarative-particles | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libqt4-declarative-shaders | < 4:4.8.1-0ubuntu4.3 | UNKNOWN |
References
Related
nessus
nessus
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS : qt4-x11 vulnerability (USN-1628-1)
2012-11-09 00:00:00
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : openssl vulnerability (USN-1898-1)
2013-07-05 00:00:00
F5 Networks BIG-IP : CRIME vulnerability via TLS 1.2 protocol (K14054)
2014-10-10 00:00:00
debian
debian
[SECURITY] [DSA 2627-1] nginx security update
2013-02-17 11:14:31
openssl security update
2014-06-20 16:35:50
[SECURITY] [DSA 2579-1] apache2 security update
2012-11-30 13:22:52
cve
cve
CVE-2012-4929
2012-09-15 18:55:00
CVE-2013-3587
2020-02-21 18:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-1628-1)
2012-11-09 00:00:00
Debian: Security Advisory (DSA-2627-1)
2013-02-16 00:00:00
Ubuntu Update for openssl USN-1898-1
2013-07-05 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2013-07-04 00:00:00
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
prion
prion
Design/Logic Flaw
2012-09-15 18:55:00
Design/Logic Flaw
2020-02-21 18:15:00
f5
f5
SOL14054 - CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2012-12-05 00:00:00
K14054 : CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929
2013-09-09 00:00:00
SOL14059 - CRIME vulnerability via the SPDY protocol CVE-2012-4930
2012-12-19 00:00:00
threatpost
threatpost
Apple Patches Mass of Security Bugs in OS X and Safari
2013-06-05 09:51:54
jvn
jvn
JVN#65273415: Android OS issue where it is affected by the CRIME attack
2016-07-22 00:00:00
ibm
ibm
veracode
veracode
Information Leakage
2019-01-15 08:58:53
osv
osv
nginx - information leak
2013-02-17 00:00:00
openssl - security update
2014-06-20 00:00:00
lighttpd - several issues
2013-02-17 00:00:00
debiancve
debiancve
CVE-2012-4929
2012-09-15 18:55:00
ubuntucve
ubuntucve
CVE-2012-4929
2012-09-15 00:00:00
CVE-2013-3587
2020-02-21 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: mingw-openssl-1.0.1e-1.fc18
2013-04-03 04:51:11
[SECURITY] Fedora 20 Update: Pound-2.6-8.fc20
2014-11-12 02:45:18
[SECURITY] Fedora 19 Update: Pound-2.6-8.fc19
2014-11-07 02:38:03
securityvulns
securityvulns
[SECURITY] [DSA 2579-1] apache2 security update
2012-12-02 00:00:00
Apache security vulnerabilities
2012-12-02 00:00:00
Apple Mac OS X multiple security vulnerabilities
2013-06-17 00:00:00
kitploit
kitploit
Sitadel - Web Application Security Scanner
2019-01-14 12:13:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2012-4929, CVE-2012-4930 aka CRIME attack
2012-10-20 22:00:00
cert
cert
BREACH vulnerability in compressed HTTPS
2013-08-02 00:00:00
redhat
redhat
(RHSA-2013:0587) Moderate: openssl security update
2013-03-04 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2013:0636) Important: rhev-hypervisor6 security and bug fix update
2013-03-13 00:00:00
centos
centos
openssl security update
2013-03-04 22:46:45
amazon
amazon
Medium: openssl
2013-03-14 22:04:00
oraclelinux
oraclelinux
openssl security update
2013-03-04 00:00:00
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2016-09-27 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2013-09-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
5.5 Medium
AI Score
Confidence
Low
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.9%
Related for USN-1628-1