CVE-2012-6093
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5,...
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
Exploit likelihood
What each source reports
NVD Score used
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
- Record
CVE-2012-6093- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
- Record
CVE-2012-6093- Updated
- 2026-11-02
EUVDEUVD-2012-5963 No score
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
- Record
EUVD-2012-5963- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8vmr-c9ff-vrfh No score
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5,...
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate.
- Record
GHSA-8vmr-c9ff-vrfh- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10180-1 No score
libqt4-32bit-4.8.7-5.4 on GA media
These are all security issues fixed in the libqt4-32bit-4.8.7-5.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10180-1- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-6093 is a medium vulnerability (CVSS 4.3) in Qt, published February 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-updates/2013-01/msg00086.html
codereview.qt-project.org
bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582
ubuntu.com/usn/USN-1723-1
secunia.com/advisories/52217
Show 20 moreShow less
qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29
lists.qt-project.org/pipermail/announce/2013-January/000020.html
openwall.com/lists/oss-security/2013/01/04/6
bugzilla.redhat.com/show_bug.cgi?id=891955
nvd.nist.gov/vuln/detail/CVE-2012-6093
github.com/advisories/GHSA-8vmr-c9ff-vrfh
suse.com/security/cve/CVE-2009-0945