Skip to content
Fencer Vulns
medium 5.3

CVE-2023-34410 json

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2.

published 2023-06-05 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-38488

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 54%
public exploits
0
none known

Summary

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

Patch / fix

  • qt qt 5.15.15, 6.2.9, 6.5.2
  • qt6-base Debian 14, Debian 13 6.4.2+dfsg-11
  • qtbase-opensource-src Debian 12 5.15.8+dfsg-11+deb12u1
  • qtbase-opensource-src Debian 14, Debian 13 5.15.8+dfsg-12
  • qtbase-opensource-src-gles Debian 14, Debian 13 5.15.10+dfsg-2

debian advisories DEBIAN-CVE-2023-34410

  • qtbase-opensource-src Ubuntu Pro 16.04 LTS 5.5.1+dfsg-16ubuntu7.7+esm1
  • qtbase-opensource-src Ubuntu Pro 18.04 LTS 5.9.5+dfsg-0ubuntu2.6+esm1
  • qtbase-opensource-src Ubuntu Pro 20.04 LTS 5.12.8+dfsg-0ubuntu2.1+esm1
  • qtbase-opensource-src Ubuntu Pro 22.04 LTS 5.15.3+dfsg-2ubuntu0.2+esm1

ubuntu advisories UBUNTU-CVE-2023-34410

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • qt5-qtbase RHEL 8 5.15.3-5.el8
  • qt5-qtbase-gui RHEL 8 5.15.3-5.el8
  • qt5-qtbase-odbc RHEL 8 5.15.3-5.el8
  • qt5-qtbase-mysql RHEL 8 5.15.3-5.el8
  • qt5-qtbase-common RHEL 8 5.15.3-5.el8
  • qt5-qtbase-examples RHEL 8 5.15.3-5.el8
  • qt5-qtbase-postgresql RHEL 8 5.15.3-5.el8
  • qt5 RHEL 9 5.15.9-1.el9

red hat advisories RHSA-2023:6967RHSA-2023:6369

  • libqt4 SLES for SAP 12 SP5, SLES 12 SP5, SLE Workstation Extension 12 SP5 +1 more 4.8.7-8.19.1
  • libqt4-sql-plugins SLES for SAP 12 SP5, SLES 12 SP5, SLE Workstation Extension 12 SP5 +1 more 4.8.7-8.19.1
  • qt6-base SLE Module for Package Hub 15 SP4, openSUSE Leap 15.4 6.2.2-150400.4.6.1
  • qt6-base SLE Module for Package Hub 15 SP5, SLE Module for Desktop Applications 15 SP5, openSUSE Leap 15.5 6.4.2-150500.3.7.4
  • libqt5-qtbase SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +8 more 5.12.7-150200.4.23.1
  • libqt5-qtbase SLE Module for Desktop Applications 15 SP5, SLE Module for Basesystem 15 SP5, openSUSE Leap 15.5 5.15.8+kde185-150500.4.8.1
  • libqt5-qtbase SLE Module for Desktop Applications 15 SP4, SLE Module for Basesystem 15 SP4, openSUSE Leap 15.4 5.15.2+kde294-150400.6.6.1
  • libqt5-qtbase SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 5.6.2-6.36.1

suse advisories SUSE-SU-2025:02968-1SUSE-SU-2023:4622-1SUSE-SU-2023:3380-1SUSE-SU-2023:3225-1SUSE-SU-2023:3207-1SUSE-SU-2023:3018-1

  • qt6-base openSUSE Tumbleweed 6.5.1-2.1
  • libqt5-qtbase openSUSE Tumbleweed 5.15.10+kde129-1.1

opensuse advisories openSUSE-SU-2024:12980-1openSUSE-SU-2024:13006-1

  • qt5-qtbase AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-gui AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-odbc AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-mysql AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-common AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-examples AlmaLinux 8 5.15.3-5.el8
  • qt5-qtbase-postgresql AlmaLinux 8 5.15.3-5.el8
  • qt5 AlmaLinux 9 5.15.9-1.el9

almalinux advisories ALSA-2023:6967ALSA-2023:6369

  • qt5 Rocky Linux 9 5.15.9-1.el9
  • qt5-qtdoc Rocky Linux 9 5.15.9-1.el9
  • qt5-qtsvg Rocky Linux 9 5.15.9-2.el9
  • adwaita-qt Rocky Linux 9 1.4.2-1.el9
  • python-qt5 Rocky Linux 9 5.15.9-1.el9
  • qt5-qtscript Rocky Linux 9 5.15.9-1.el9
  • qt5-qtsensors Rocky Linux 9 5.15.9-1.el9
  • qt5-qtwayland Rocky Linux 9 5.15.9-1.el9

rocky linux advisories RLSA-2023:6369

  • qt5-qtbase CBL-Mariner 2.0 5.12.11-15

azure linux advisories AZL-27141

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-34410 updated cvss 5.3

qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation

  • Red Hat Enterprise Linux 6 qt, qt3, qt-x11, qt-odbc, qt-demos, qt-mysql, +10 more Red Hat Enterprise Linux 7 qt, qt3, qt-x11, qt-odbc, qt-qvfb, qt-demos, +12 more
    affected: no fix planned “Out of support scope”
  • Red Hat CodeReady Linux Builder (v. 8) qt5-qtbase-static 5.15.3-5.el8, qt5-qtbase-debuginfo 5.15.3-5.el8, qt5-qtbase-debugsource 5.15.3-5.el8, qt5-qtbase-gui-debuginfo 5.15.3-5.el8, qt5-qtbase-odbc-debuginfo 5.15.3-5.el8, qt5-qtbase-devel-debuginfo 5.15.3-5.el8, +4 more
    fixed: vendor fix RHSA-2023:6967
  • Red Hat CodeReady Linux Builder (v. 9) qt5-devel 5.15.9-1.el9
    fixed: vendor fix RHSA-2023:6369
  • Red Hat Enterprise Linux AppStream (v. 8) qt5-qtbase 5.15.3-5.el8, qt5-qtbase-gui 5.15.3-5.el8, qt5-qtbase-odbc 5.15.3-5.el8, qt5-qtbase-mysql 5.15.3-5.el8, qt5-qtbase-common 5.15.3-5.el8, qt5-qtbase-examples 5.15.3-5.el8, +1 more
    fixed: vendor fix RHSA-2023:6967
  • Red Hat Enterprise Linux AppStream (v. 9) qt5 5.15.9-1.el9, qt5-rpm-macros 5.15.9-1.el9, qt5-srpm-macros 5.15.9-1.el9
    fixed: vendor fix RHSA-2023:6369
  • Red Hat CodeReady Linux Builder (v. 9) python3-qt5 5.15.9-1.el9 Red Hat Enterprise Linux AppStream (v. 9) qt5-qt3d 5.15.9-1.el9, adwaita-qt 1.4.2-1.el9, qt5-qtdoc 5.15.9-1.el9, qt5-qtsvg 5.15.9-2.el9, adwaita-qt5 1.4.2-1.el9, python-qt5 5.15.9-1.el9, +59 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
22 mo ago

Exploit prediction

0.74% chance of exploitation in the next 30 days, higher than 54% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Classification

Weakness
  • CWE-295 Improper Certificate Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.