|
|
| |
|
| |
qt: CRIME attacks
| Package(s): | qt |
CVE #(s): | |
| Created: | October 15, 2012 |
Updated: | October 17, 2012 |
| Description: |
From the qt advisory:
A security vulnerability has been discovered in the SSL/TLS protocol, which affects connections using compression.
All versions of TLS are believed to be affected.
To address this, Qt will disable TLS compression by default.
If the attacker can insert data into the SSL connection, then by looking at the length of the compressed data it is possible to determine if the inserted data matches secret data or not. |
| Alerts: |
|
( Log in to post comments)
|
|
|