CVE-2010-2621: Input Validation

Q: What is the severity of CVE-2010-2621?

CVE-2010-2621 is classified as a denial of service vulnerability that can lead to an infinite loop.

Q: How do I fix CVE-2010-2621?

To address CVE-2010-2621, upgrade to a version of Qt later than 4.6.3 where the vulnerability has been resolved.

Q: What versions of Qt are affected by CVE-2010-2621?

CVE-2010-2621 affects Qt versions 4.6.3 and earlier, including all versions from 4.0.0 to 4.6.2.

Q: Can CVE-2010-2621 be exploited remotely?

Yes, CVE-2010-2621 can be exploited by remote attackers through a malformed request, leading to a denial of service.

Q: What impact does CVE-2010-2621 have on applications using Qt?

Applications using affected versions of Qt may experience service interruption due to the infinite loop triggered by the vulnerability.

Published Jul 2, 2010

Updated

The QSslSocketBackendPrivate::transmit function in srcnetworksslqsslsocketopenssl.cpp in Qt 4.6.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed request.

Affected Software

30 affected components

Digia Qt<=4.6.3

Qt QT=4.0.0

Qt QT=4.0.1

Qt QT=4.1.0

Qt QT=4.1.1

Qt QT=4.1.2

Qt QT=4.1.3

Qt QT=4.1.4

Qt QT=4.1.5

Qt QT=4.2.0

Qt QT=4.2.1

Qt QT=4.2.3

Qt QT=4.3.0

Qt QT=4.3.1

Qt QT=4.3.2

Qt QT=4.3.3

Qt QT=4.3.4

Qt QT=4.3.5

Qt QT=4.4.0

Qt QT=4.4.1

Qt QT=4.4.2

Qt QT=4.4.3

Qt QT=4.5.0

Qt QT=4.5.1

Qt QT=4.5.2

Qt QT=4.5.3

Qt QT=4.6.0

Qt QT=4.6.0-rc1

Qt QT=4.6.1

Qt QT=4.6.2

Event History

Jul 2, 2010

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2621?

CVE-2010-2621 is classified as a denial of service vulnerability that can lead to an infinite loop.

How do I fix CVE-2010-2621?

To address CVE-2010-2621, upgrade to a version of Qt later than 4.6.3 where the vulnerability has been resolved.

What versions of Qt are affected by CVE-2010-2621?

CVE-2010-2621 affects Qt versions 4.6.3 and earlier, including all versions from 4.0.0 to 4.6.2.

Can CVE-2010-2621 be exploited remotely?

Yes, CVE-2010-2621 can be exploited by remote attackers through a malformed request, leading to a denial of service.

What impact does CVE-2010-2621 have on applications using Qt?