Every CVESearch/Get API key

CVE-2010-5076

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name...

4.3 Medium

CVE-2010-5076 is a medium vulnerability (CVSS 4.3) in Digia Qt, published June 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.

What does this mean?
Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
1.39%EPSS, 72nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Exploit likelihood

1.39%Down 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-demos
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-examples
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-mysql
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-odbc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-postgresql
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
Show 38 moreShow less
Affected packages
PackageAffectedFixed
qt-sqlite
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-x11
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-demos
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-examples
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-mysql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-odbc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-postgresql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-sqlite
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-x11
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-demos
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-examples
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-mysql
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-odbc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-postgresql
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-sqlite
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-x11
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-demos
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-examples
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
phonon-backend-gstreamer
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-mysql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-odbc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-postgresql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-sqlite
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6
qt-x11
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
before 1:4.6.2-24.el6
1:4.6.2-24.el6

What each source reports

NVD Score used4.3

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Record
CVE-2010-5076
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Record
CVE-2010-5076
Updated
2026-11-02
EUVDEUVD-2010-5040No score

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Record
EUVD-2010-5040
Updated
2026-11-03
GitHub AdvisoriesGHSA-c3q6-g74w-mvvqNo score

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name...

QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Record
GHSA-c3q6-g74w-mvvq
Weakness
CWE-20
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 17 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open