https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:31:45.018388+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4690 ALSA-2020:4690 — Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update 2026-10-05T09:31:45.030385+00:00

Affected: AlmaLinux:8: qt5-qtbase-static, AlmaLinux:8: qt5-qttools-static

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qt: XML entity expansion vulnerability (CVE-2015-9541)

* qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035)

* qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569)

* qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570)

* qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05049 bdu:2023-05049 2026-10-05T09:31:45.030464+00:00 bdu:2023-05049 https://cve.radiocsirt.org/vuln/cnvd-2020-21088 cnvd-2020-21088 2026-10-05T09:31:45.030481+00:00 cnvd-2020-21088 https://cve.radiocsirt.org/vuln/euvd-2026-70711 EUVD-2026-70711 2026-10-05T09:31:45.030494+00:00 EUVD-2026-70711 https://cve.radiocsirt.org/vuln/fkie_cve-2018-21035 fkie_cve-2018-21035 2026-10-05T09:31:45.030505+00:00

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

 https://cve.radiocsirt.org/vuln/ghsa-xhq4-5269-2ffv GHSA-xhq4-5269-2ffv 2026-10-05T09:31:45.030526+00:00

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

 https://cve.radiocsirt.org/vuln/gsd-2018-21035 gsd-2018-21035 2026-10-05T09:31:45.030541+00:00 gsd-2018-21035 https://cve.radiocsirt.org/vuln/msrc_cve-2018-21035 msrc_CVE-2018-21035 — In Qt through 5.14.1 the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits can… 2026-10-05T09:31:45.030551+00:00 msrc_CVE-2018-21035 https://cve.radiocsirt.org/vuln/rhsa-2020:4690 RHSA-2020:4690 — Red Hat Security Advisory: qt5-qtbase and qt5-qtwebsockets security and bug fix update 2026-10-05T09:31:45.030576+00:00

qt: XML entity expansion vulnerability qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS qt: files placed by attacker can influence the working directory and lead to malicious code execution qt: files placed by attacker can influence the working directory and lead to malicious code execution qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-21035 UBUNTU-CVE-2018-21035 2026-10-05T09:31:45.030598+00:00

Affected: Ubuntu:16.04:LTS: qtwebsockets-opensource-src, Ubuntu:18.04:LTS: qtwebsockets-opensource-src, Ubuntu:20.04:LTS: qtwebsockets-opensource-src

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).