PT-2019-18616 · Kde+3 · Kde Kauth+3
CVE-2019-7443
·
Publicado
2019-02-13
·
Atualizado
2023-04-20
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
KDE KAuth versions prior to 5.55
Description
The issue allows the passing of parameters with arbitrary types to helpers running as root over DBus via
DBusHelperProxy.cpp. This can cause crashes and trigger the decoding of arbitrary images with dynamically loaded plugins, increasing the severity of any possible exploitation of a plugin vulnerability.Recommendations
For versions prior to 5.55, update to version 5.55 or later to resolve the issue. As a temporary workaround, consider restricting the use of
DBusHelperProxy.cpp to minimize the risk of exploitation. Avoid using arbitrary types when passing parameters to helpers running as root over DBus until the issue is resolved.Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Kde Kauth
Suse
Ubuntu