Ubuntu.comUB:CVE-2024-36041CVE-2024-36041
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1
and 6.x before 6.0.5.1 allows connections via ICE based purely on the host,
i.e., all local connections are accepted. This allows another user on the
same machine to gain access to the session manager, e.g., use the
session-restore feature to execute arbitrary code as the victim (on the
next boot) via earlier use of the /tmp directory.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | plasma-workspace | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | plasma-workspace | < 4:5.18.8-0ubuntu0.2 | UNKNOWN |
| ubuntu | 22.04 | noarch | plasma-workspace | < 4:5.24.7-0ubuntu0.2 | UNKNOWN |
| ubuntu | 23.10 | noarch | plasma-workspace | < 4:5.27.8-0ubuntu1.1 | UNKNOWN |
| ubuntu | 24.04 | noarch | plasma-workspace | < 4:5.27.11-0ubuntu4.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | plasma-workspace | < any | UNKNOWN |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
5.1%