The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c37b7a4e71 advisory.

    Apply fix for CVE-2024-39936

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39936 advisory.

  - An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection May execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4647 advisory.

    [5.9.7-5.0.1]
    - Backport fix for CVE-2024-39936 [Orabug: 36904373]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtxmlpatterns installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2674 advisory.

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtmultimedia installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2669 advisory.

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtx11extras installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2660 advisory.

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtcanvas3d installed on the remote host is prior to 5.12.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2664 advisory.

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtlocation installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2670 advisory.

    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtbase / qtbase installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39936 advisory.

  - An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection May execute too early, because the encrypted() signal has not yet been emitted and processed..
    (CVE-2024-39936)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0282 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-39936:
    An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before     6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established     connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8583:03 advisory.

    * qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8586:04 advisory.

    * qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205180	Fedora 40 : mingw-qt5-qtbase (2024-c37b7a4e71)	Nessus	Fedora Local Security Checks	8/8/2024	8/8/2024	medium
205797	CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2024-39936)	Nessus	MarinerOS Local Security Checks	8/19/2024	1/22/2026	medium
206793	Oracle Linux 7 : qt5-qtbase (ELSA-2024-4647)	Nessus	Oracle Linux Local Security Checks	9/9/2024	9/9/2025	medium
210083	Amazon Linux 2 : qt5-qtxmlpatterns (ALAS-2024-2674)	Nessus	Amazon Linux Local Security Checks	11/1/2024	12/11/2024	medium
210086	Amazon Linux 2 : qt5-qtmultimedia (ALAS-2024-2669)	Nessus	Amazon Linux Local Security Checks	11/1/2024	12/11/2024	medium
210087	Amazon Linux 2 : qt5-qtx11extras (ALAS-2024-2660)	Nessus	Amazon Linux Local Security Checks	11/1/2024	12/11/2024	medium
210094	Amazon Linux 2 : qt5-qtcanvas3d (ALAS-2024-2664)	Nessus	Amazon Linux Local Security Checks	11/1/2024	12/11/2024	medium
210098	Amazon Linux 2 : qt5-qtlocation (ALAS-2024-2670)	Nessus	Amazon Linux Local Security Checks	11/1/2024	12/11/2024	medium
215812	Azure Linux 3.0 Security Update: qt5-qtbase / qtbase (CVE-2024-39936)	Nessus	Azure Linux Local Security Checks	2/10/2025	9/15/2025	medium
239117	TencentOS Server 4: qt5-qtbase (TSSA-2024:0282)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	medium
292831	MiracleLinux 8 : qt5-qtbase-5.15.3-8.el8_10 (AXSA:2024-8583:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
293722	MiracleLinux 9 : qt5-qtbase-5.15.9-10.el9_4 (AXSA:2024-8586:04)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium