PT-2014-8657 · Kde+1 · Kde-Workspace+2

Publicado 2014-11-07 · Atualizado 2016-12-07 · CVE-2014-8651

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions kde-workspace versions prior to 4.11.14 plasma-desktop versions prior to 5.1.1

Description The issue allows local users to gain privileges via a crafted ntpUtility argument in the KDE Clock KCM policykit helper.

Recommendations For kde-workspace versions prior to 4.11.14, update to version 4.11.14 or later. For plasma-desktop versions prior to 5.1.1, update to version 5.1.1 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8651

MGASA-2014-0445

MGASA-2014-0480

SUSE-SU-2016:0303-1

SUSE-SU-2016_0303-1

USN-2402-1

Produtos afetados

Suse

Kde-Workspace

Plasma-Desktop

Referências · 35

• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://osv.dev/vulnerability/MGASA-2014-0480 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2016/suse-su-20160303-1 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=14487 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=14578 · Nota
• http://securityfocus.com/bid/70904 · Nota
• https://git.reviewboard.kde.org/r/120977 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2016-February/001839.html · Nota
• https://advisories.mageia.org/MGASA-2014-0445.html · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144034.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-8651 · Nota de Segurança
• https://bugs.kde.org/show_bug.cgi?id=127861 · Nota
• https://suse.com/security/cve/CVE-2014-8651.html · Nota
• http://openwall.com/lists/oss-security/2014/11/04/9 · Nota
• https://ubuntu.com/security/notices/USN-2402-1 · Aviso do Fabricante