This host is installed with Qt and is prone to denial of service vulnerability.

Successful exploitation will allow attacker to cause a denial of service. Impact Level: Application

Upgrade to version 4.6.4 or later, For updates refer to ftp://ftp.qt.nokia.com/qt/source

This flaw is due to an endless loop within the 'QSslSocketBackendPrivate::transmit()' function in 'src/network/ssl/qsslsocket_openssl.cpp'. This can be exploited to exhaust CPU resources in server applications using the QSslSocket class.

Qt Version 4.6.3 and prior.

• http://aluigi.altervista.org/adv/qtsslame-adv.txt
• http://secunia.com/advisories/40389
• http://www.vupen.com/english/advisories/2010/1657

---

Updated on 2015-03-25