Unrated severityNVD Advisory· Published Feb 28, 2020· Updated Aug 5, 2024
CVE-2018-21035
CVE-2018-21035
Description
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
Affected products
3- Qt/Qtdescription
- osv-coords2 versions
< 5.12.5-6.el8+ 1 more
- (no CPE)range: < 5.12.5-6.el8
- (no CPE)range: < 5.12.5-2.el8
Patches
Vulnerability mechanics
References
2- bugreports.qt.io/browse/QTBUG-70693mitrex_refsource_MISC
- codereview.qt-project.org/c/qt/qtwebsockets/+/284735mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.