# CVE-2018-21035: qt5-assistant: Qt is a software toolkit for developing applications

CVE-2018-21035 is fixed in 26 products on 1 platform, first by RHSA-2020:4690, released November 4, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2018-21035
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0234
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 4, 2020

## Description

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.   Security Fix(es):  * qt: XML entity expansion vulnerability (CVE-2015-9541)  * qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035)  * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569)  * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570)  * qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | qt5-assistant RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-assistant ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-designer RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-designer ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-doctools RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-doctools ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-linguist RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-linguist ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qdbusviewer RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qdbusviewer ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-common RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-common ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-devel RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-devel ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-examples RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-examples ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-gui RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-gui ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-mysql RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-mysql ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-odbc RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-odbc ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-postgresql RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-postgresql ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-private-devel RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-private-devel ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtbase-static RHEL 8 | 0:5.12.5-6.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtbase-static ol 8 | 0:5.12.5-6.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-common RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-common ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-devel RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-devel ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-examples RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-examples ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-libs-designer RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-libs-designer ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-libs-designercomponents RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-libs-designercomponents ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-libs-help RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-libs-help ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qttools-static RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qttools-static ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtwebsockets RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtwebsockets ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtwebsockets-devel RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtwebsockets-devel ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |
| Linux | qt5-qtwebsockets-examples RHEL 8 | 0:5.12.5-2.el8 | [RHSA-2020:4690](https://patchblox.com/security/data/fix/linux/rhsa-2020-4690.md) | Nov 4, 2020 |
| Linux | qt5-qtwebsockets-examples ol 8 | 0:5.12.5-2.el8 | [ELSA-2020-4690](https://patchblox.com/security/data/fix/linux/elsa-2020-4690.md) | Nov 10, 2020 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo