PT-2018-9846 · Kde+1 · Ktexteditor+2

Matthias Gerstner · Published 2018-04-25 · Updated 2024-06-15 · CVE-2018-10361

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: KTextEditor versions 5.34.0 through 5.45.0

Description: An issue in KTextEditor's kauth ktexteditor helper service, used in the Kate text editor, allows other unprivileged users on the local system to gain root privileges due to insecure handling of temporary files. This can occur when one user writes a text file using Kate into a directory owned by another unprivileged user, who then conducts a symlink attack to achieve privilege escalation.

Recommendations: For KTextEditor versions 5.34.0 through 5.45.0, consider restricting access to the kauth ktexteditor helper service until a patch is available. As a temporary workaround, avoid using the Kate text editor to write files into directories owned by other unprivileged users. Restrict the ability of unprivileged users to conduct symlink attacks on temporary files created by KTextEditor.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

ALT-PU-2018-1713

CVE-2018-10361

OPENSUSE-SU-2024:10900-1

Affected Products

Alt Linux

Ktexteditor

Kate

References · 15

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10361 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-10361 · Security Note
• https://errata.altlinux.org/ALT-PU-2018-1713 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10900-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-10361 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-10361 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10361 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-10361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10361 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10361 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=1033055 · Note
• http://openwall.com/lists/oss-security/2019/07/09/3 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2018-10361 · Note
• http://openwall.com/lists/oss-security/2018/04/24/1 · Note
• https://suse.com/security/cve/CVE-2018-10361 · Note