VDB
GHSA-5qcq-v4vg-rv2h
GHSA-5qcq-v4vg-rv2h
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Record from GitHub Advisory Database · Published June 5, 2023
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.
Risk scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Timeline
- Jun 5, 2023 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-5qcq-v4vg-rv2h
vulnetix vdb fixes GHSA-5qcq-v4vg-rv2hOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-5qcq-v4vg-rv2h/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-34410 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3IHQZCEUFVOPWG75V2HDKXNUZBB4FX url
- https://codereview.qt-project.org/c/qt/qtbase/+/477560 url
- https://codereview.qt-project.org/c/qt/qtbase/+/480002 url
- https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UE3IHQZCEUFVOPWG75V2HDKXNUZBB4FX url