Linux Distros Unpatched Vulnerability : CVE-2020-27187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcoreexternalcommand helper contains a logic flaw in which the service invoking D-Bus...

GLSA-202011-03 : KPMCore: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...

CVE-2020-27187

CVE-2020-27187 affects KDE Partition Manager (kpmcore) 4.1.0 before 4.2.0. The vulnerability stems from improper checks on the D-Bus request for /etc/fstab, allowing a local attacker to replace /etc/fstab and run mount/partitioning commands while KDE Partition Manager is running, potentially esca...

Fedora 33 : calamares / kde-partitionmanager / kpmcore (2020-73471e6414)

Update kpmcore to 4.2.0 and rebuild all dependent packages. This update also fixes CVE-2020-27187. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...