PT-2020-16321 · Kde+2 · Kdeconnect-Kde+2

Published 2020-10-05 · Updated 2023-10-12 · CVE-2020-26164

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions kdeconnect-kde versions prior to 20.08.2

Description The issue allows an attacker on the local network to send crafted packets, triggering the use of large amounts of CPU, memory, or network connection slots, resulting in a Denial of Service attack.

Recommendations For versions prior to 20.08.2, update to version 20.08.2 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2020-2939

CVE-2020-26164

MGASA-2020-0416

OPENSUSE-SU-2020:1631-1

OPENSUSE-SU-2020:1647-1

OPENSUSE-SU-2020:1650-1

OPENSUSE-SU-2020_1631-1

OPENSUSE-SU-2024:10890-1

Affected Products

Alt Linux

Suse

Kdeconnect-Kde

References · 50

• https://github.com/KDE/kdeconnect-kde/commit/024e5f23db8d8ad3449714b906b46094baaffb89 · Patch
• https://github.com/KDE/kdeconnect-kde/commit/613899be24b6e2a6b3e5cc719efce8ae8a122991 · Patch
• https://github.com/KDE/kdeconnect-kde/commit/ce0f00fc2d3eccb51d0af4eba61a4f60de086a59 · Patch
• https://github.com/KDE/kdeconnect-kde/commit/542d94a70c56aa386c8d4d793481ce181b0422e8 · Patch
• https://github.com/KDE/kdeconnect-kde/commit/8112729eb0f13e6947984416118531078e65580d · Patch
• https://github.com/KDE/kdeconnect-kde/commit/4fbd01a3d44a0bcca888c49a77ec7cfd10e113d7 · Patch
• https://advisories.mageia.org/MGASA-2020-0416.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-26164 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-26164 · Vendor Advisory
• https://kde.org/info/security/advisory-20201002-1.txt · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1647-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1631-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00016.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-26164 · Security Note
• https://osv.dev/vulnerability/MGASA-2020-0416 · Vendor Advisory