Unrated severityNVD Advisory· Published Feb 24, 2013· Updated Apr 29, 2026
CVE-2012-6093
CVE-2012-6093
Description
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
Affected products
25cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.7.6:rc:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:4.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:qt:qt:*:rc:*:*:*:*:*:*range: <=4.6.5
cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- lists.qt-project.org/pipermail/announce/2013-January/000020.htmlnvdVendor Advisory
- secunia.com/advisories/52217nvdVendor Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvd
- lists.opensuse.org/opensuse-updates/2013-01/msg00086.htmlnvd
- lists.opensuse.org/opensuse-updates/2013-01/msg00089.htmlnvd
- lists.opensuse.org/opensuse-updates/2013-02/msg00014.htmlnvd
- qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29nvd
- qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29nvd
- www.openwall.com/lists/oss-security/2013/01/04/6nvd
- www.ubuntu.com/usn/USN-1723-1nvd
- bugzilla.redhat.com/show_bug.cginvd
- codereview.qt-project.orgnvd
News mentions
0No linked articles in our index yet.