REDHAT-BUG-1810964: Medium severity trolltech qt vulnerability

Q: What is the severity of REDHAT-BUG-1810964?

The severity of REDHAT-BUG-1810964 is significant as it can lead to denial of service due to excessive memory consumption.

Q: How do I fix REDHAT-BUG-1810964?

To fix REDHAT-BUG-1810964, you should update the Qt library to a version later than 5.14.1 where this issue is addressed.

Q: Which versions of Qt are affected by REDHAT-BUG-1810964?

Qt versions up to and including 5.14.1 are affected by REDHAT-BUG-1810964.

Q: What kind of attack does REDHAT-BUG-1810964 enable?

REDHAT-BUG-1810964 enables attackers to conduct denial of service attacks by consuming excessive memory.

Q: Is it possible to configure the frame size limits in REDHAT-BUG-1810964?

No, in REDHAT-BUG-1810964 the WebSocket implementation does not allow configuration of smaller frame size limits.

Published Mar 6, 2020

Updated

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

Upstream Issue:

https://bugreports.qt.io/browse/QTBUG-70693

Upstream Fix:

https://codereview.qt-project.org/c/qt/qtwebsockets/+/284735

Affected Software

1 affected component

Qt QT<=5.14.1

Event History

Mar 6, 2020

Data Sourced

via Red Hat·10:21 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1810964?

The severity of REDHAT-BUG-1810964 is significant as it can lead to denial of service due to excessive memory consumption.

How do I fix REDHAT-BUG-1810964?

To fix REDHAT-BUG-1810964, you should update the Qt library to a version later than 5.14.1 where this issue is addressed.

Which versions of Qt are affected by REDHAT-BUG-1810964?