UBUNTU-CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2013-2213

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output...

CVE-2013-2213

The CVE-2013-2213 entry applies to KDE Paste Applet (kdeplasma-addons) post-4.10.5, where KRandom::random uses the GNU C Library rand()’s linear congruential generator. This weak PRNG makes it feasible for context-dependent attackers to predict output and compromise cryptographic protections as d...

CVE-2013-2213

The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output...

CVE-2013-2120

CVE-2013-2120 affects the KDE Paste Applet in kdeplasma-addons up to version prior to 4.10.5 . The vulnerability stems from the %{password(...)} macro in pastemacroexpander.cpp, which does not generate passwords securely, allowing context-dependent attackers to bypass authentication via a brute-f...

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2013-2120

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

CVE-2012-4512 affects Konqueror’s CSS parser (khtml/css/cssparser.cpp) in KDE 4.7.3. A remote attacker can crash the browser and possibly read memory via a crafted font-face source due to a type-confusion issue. Connected advisories (MiracleLinux AXSA-2012-970:03, SUSE/Security Advisories, Gentoo...

CVE-2012-4512

The CSS parser khtml/css/cssparser.cpp in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service crash and possibly read memory via a crafted font face source, related to "type confusion."...

CVE-2012-4512

Removed by vendor...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kdelibs Vulnerability (NS-SA-2019-0254)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kdelibs packages installed that are affected by a vulnerability: - In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates ...

CVE-2013-4133

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

CVE-2013-4133

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

Memory corruption

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

CVE-2013-4133

kde-workspace before 4.10.5 has a memory leak in plasma desktop...

CVE-2013-4133

CVE-2013-4133 affects kde-workspace up to version 4.10.4/before 4.10.5, where the plasma desktop has a memory leak. The root cause is a leak in plasma desktop components within kde-workspace, leading to potential resource exhaustion. Context from connected advisories shows patches in KDE openSUSE...

OPENSUSE-SU-2019:2654-1 Security update for calamares

This update for calamares fixes the following issues: - Launch with 'pkexec calamares' in openSUSE Tumbleweed, but launch with 'xdg-su -c calamares' in openSUSE Leap 15. Update to Calamares 3.2.15: - 'displaymanager' module now treats 'sysconfig' as a regular entry in the 'displaymanagers' list,...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kdelibs Vulnerability (NS-SA-2019-0223)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kdelibs packages installed that are affected by a vulnerability: - In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates ...