Bug 2572335 (CVE-2026-114369)
| Summary: | CVE-2026-114369 qt: qt: Denial of Service via resource exhaustion in Qt WebSockets | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Qt. A remote attacker can cause a Denial of Service (DoS) through resource exhaustion within the QWebSocket and QWebSocketServer classes of the Qt WebSockets module. By triggering excessive resource consumption over the network without requiring authentication, an attacker can degrade application performance and impact service availability.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2572665, 2572666, 2572667, 2572668, 2572669, 2572670 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-11-12 11:21:13 UTC
|