Lucene search

K
mageiaGentoo FoundationMGASA-2024-0214
HistoryJun 07, 2024 - 8:31 p.m.

Updated plasma-workspace packages fix security vulnerability

2024-06-0720:31:41
Gentoo Foundation
advisories.mageia.org
2
plasma-workspace
security
vulnerability
ksmserver
kde
xsmp manager
ice
session manager
session restore
arbitrary code

7.5 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

KSmserver, KDE’s XSMP manager, incorrectly allows connections via ICE based purely on the host, allowing all local connections. This allows another user on the same machine to gain access to the session manager. A well crafted client could use the session restore feature to execute arbitrary code as the user on the next boot.

OSVersionArchitecturePackageVersionFilename
Mageia9noarchplasma-workspace< 5.27.10-1.1plasma-workspace-5.27.10-1.1.mga9

7.5 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%