KDE-Libs vulnerability

2014-07-3100:00:00

ubuntu.com

8.9 High

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

kde4libs - KDE 4 core applications and libraries

Details

It was discovered that kauth was using polkit in an unsafe manner. A local
attacker could possibly use this issue to bypass intended polkit
authorizations.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchkdelibs5-plugins< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchkdelibs-bin< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchkdelibs5-dbg< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchkdelibs5-dev< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchkdoctools< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchlibkcmutils4< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchlibkde3support4< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchlibkdeclarative5< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchlibkdecore5< 4:4.13.2a-0ubuntu0.3UNKNOWN
Ubuntu14.04noarchlibkdesu5< 4:4.13.2a-0ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	kdelibs5-plugins	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	kdelibs-bin	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	kdelibs5-dbg	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	kdelibs5-dev	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	kdoctools	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	libkcmutils4	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	libkde3support4	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	libkdeclarative5	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	libkdecore5	< 4:4.13.2a-0ubuntu0.3	UNKNOWN
Ubuntu	14.04	noarch	libkdesu5	< 4:4.13.2a-0ubuntu0.3	UNKNOWN