CVE-2019-14744

The CVE-2019-14744 issue affects KDE Frameworks KConfig prior to 5.61.0, specifically libKF5ConfigCore.so, where mishandling of .desktop and .directory files enables code execution with minimal user interaction. The vulnerability stems from how KConfig processes shell commands in desktop/config f...

KDE Linux Desktops Could Get Hacked Without Even Opening Malicious Files

If you are running a KDE desktop environment on your Linux operating system, you need to be extra careful and avoid downloading any ".desktop" or ".directory" file for a while. A cybersecurity researcher has disclosed an unpatched zero-day vulnerability in the KDE software framework that could...

CVE-2019-14744

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .deskto...

UBUNTU-CVE-2019-14744

In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .deskto...

PT-2019-3475 · Kde +5 · Kde Frameworks Kconfig +5

Name of the Vulnerable Software and Affected Versions: KDE Frameworks KConfig versions prior to 5.61.0 Description: The issue relates to the mishandling of .desktop and .directory files by libKF5ConfigCore.so, allowing code execution with minimal user interaction. This can be achieved by includin...

[SECURITY] Fedora 25 Update: kf5-kio-5.31.0-2.fc25

KDE Frameworks 5 Tier 3 solution for filesystem abstraction...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

Directory traversal

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

Fedora 23 : 1:oxygen-icon-theme / breeze-icon-theme / extra-cmake-modules / kf5 / etc (2016-cef912e3a4)

KDE Frameworks 5.24, see also https://www.kde.org/announcements/kde-frameworks-5.24.0.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 24 : 1:oxygen-icon-theme / breeze-icon-theme / extra-cmake-modules / kf5 / etc (2016-4701636a74)

KDE Frameworks 5.24, see also see also https://www.kde.org/announcements/kde-frameworks-5.24.0.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 23 Update: kf5-ki18n-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon for localization...

[SECURITY] Fedora 23 Update: kf5-kdnssd-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...

[SECURITY] Fedora 23 Update: kf5-knotifications-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 solution with abstraction for system notifications...

[SECURITY] Fedora 23 Update: kf5-kunitconversion-5.24.0-1.fc23

KDE Frameworks 5 Tier 2 addon for unit conversions...

[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 23 Update: kf5-threadweaver-5.24.0-1.fc23

KDE Frameworks 5 Tier 1 addon for advanced thread management...

[SECURITY] Fedora 23 Update: kf5-kactivities-stats-5.24.0-1.fc23

A KDE Frameworks 5 Tier 3 library for accessing the usage data collected by the activities system...

[SECURITY] Fedora 23 Update: kf5-knotifyconfig-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 module for KNotify configuration...