{"id":"CVE-2020-13962","details":"Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)","modified":"2026-07-08T05:56:32.570200069Z","published":"2020-06-09T00:15:10.123Z","related":["ALSA-2020:4690","SUSE-SU-2020:2357-1","openSUSE-SU-2020:1319-1","openSUSE-SU-2024:11742-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"31"},{"last_affected":"31"},{"introduced":"32"},{"last_affected":"32"},{"introduced":"33"},{"last_affected":"33"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"opensuse:leap","cpes":["cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.2"},{"last_affected":"15.2"}]}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X6EDPIIAQPVP2CHL2CHDHJ25EECA7UE/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQJDBZUYMMF4R5QQKD2HTIKQU2NSKO63/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3IZY7LKJ6NAXQDFYFR4S7L5BBHYK53K/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202007-18"},{"type":"REPORT","url":"https://bugreports.qt.io/browse/QTBUG-83450"},{"type":"FIX","url":"https://github.com/mumble-voip/mumble/issues/3679"},{"type":"FIX","url":"https://github.com/mumble-voip/mumble/pull/4032"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mumble-voip/mumble","events":[{"introduced":"78fefb4a2094bb22919598b87ca1628bb9eeda60"},{"last_affected":"78fefb4a2094bb22919598b87ca1628bb9eeda60"}],"database_specific":{"extracted_events":[{"introduced":"1.3.0-NA"},{"last_affected":"1.3.0-NA"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:mumble:mumble:1.3.0:-:*:*:*:*:*:*"}}],"versions":["1.3.0-NA","1.3.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qt5","events":[{"introduced":"7100c54887416c99d9f4f08b81e61f1bd03fda3c"},{"fixed":"e16b5baa08efe8cda43fae9d00d287d314770675"},{"introduced":"644f8b7006737a89bfa171fcc7df15a312d678d7"},{"last_affected":"aebccd288510a85a2de6c12cbc5e5d9980f3df75"},{"introduced":"26ef6f7c13a704f8f52050216c7676b1229ff9e6"},{"last_affected":"2e7ba38d18768d2a926bf78bf253fec71ba5fe15"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.12.2"},{"fixed":"5.12.9"},{"introduced":"5.13.0"},{"last_affected":"5.13.2"},{"introduced":"5.14.0"},{"last_affected":"5.14.2"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/qt/qtbase","events":[{"introduced":"856fb1ab44722f5165fb6b5dec0bd748006acd10"},{"fixed":"823ed71e220ebde07970dd61c04bb47b01dd06c4"},{"introduced":"fc9ae22c88dd085c7c31599037132fc756feeb04"},{"last_affected":"a7a24784eeba6747d319eb911583bdd99ef38cdb"},{"introduced":"2a887a517eaaa2c5324aecf3b919899b7a86ff4a"},{"last_affected":"3a6d8df5219653b043bd642668cee193f563ec84"}],"database_specific":{"cpe":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.12.2"},{"fixed":"5.12.9"},{"introduced":"5.13.0"},{"last_affected":"5.13.2"},{"introduced":"5.14.0"},{"last_affected":"5.14.2"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13962.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}