PT-2018-9846 · Kde+1 · Ktexteditor+2

Matthias Gerstner · Publicado 2018-04-25 · Atualizado 2024-06-15 · CVE-2018-10361

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: KTextEditor versions 5.34.0 through 5.45.0

Description: An issue in KTextEditor's kauth ktexteditor helper service, used in the Kate text editor, allows other unprivileged users on the local system to gain root privileges due to insecure handling of temporary files. This can occur when one user writes a text file using Kate into a directory owned by another unprivileged user, who then conducts a symlink attack to achieve privilege escalation.

Recommendations: For KTextEditor versions 5.34.0 through 5.45.0, consider restricting access to the kauth ktexteditor helper service until a patch is available. As a temporary workaround, avoid using the Kate text editor to write files into directories owned by other unprivileged users. Restrict the ability of unprivileged users to conduct symlink attacks on temporary files created by KTextEditor.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

ALT-PU-2018-1713

CVE-2018-10361

OPENSUSE-SU-2024:10900-1

Produtos afetados

Alt Linux

Ktexteditor

Kate

Referências · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10361 · Aviso do Fabricante
• https://bugzilla.suse.com/show_bug.cgi?id=1033055 · Nota
• https://cve.org/CVERecord?id=CVE-2018-10361 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2018-1713 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10900-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-10361 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2019/07/09/3 · Nota
• https://osv.dev/vulnerability/CVE-2018-10361 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10361 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2018-10361 · Nota
• http://openwall.com/lists/oss-security/2018/04/24/1 · Nota
• https://suse.com/security/cve/CVE-2018-10361 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-10361 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-10361 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10361 · Nota de Segurança