Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 7 MGASA-2021-0270 Moderate: qtwebsockets5 DoS Threat

mageia
Calendar Grey June 23, 2021
Dist Mageia Esm H88
The recent release of updated qtwebsockets5 packages addresses a memory usage problem related to CVE-2018-21035 on Mageia, which was issued on June 23.
In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages

Summary

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption) (CVE-2018-21035).

References

- https://bugs.mageia.org/show_bug.cgi?id=27560

- https://access.redhat.com/errata/RHSA-2020:4690

- https://www.cve.org/CVERecord?id=CVE-2018-21035

Topics%20covered

Topics Covered

security advisory DoS memory consumption Mageia qtwebsockets5

Resolution

SRPMS

- 7/core/qtwebsockets5-5.12.6-1.1.mga7

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0270.html
Type: security
CVE: CVE-2018-21035

Topics%20covered

Topics Covered

security advisory DoS memory consumption Mageia qtwebsockets5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here