Skip to content
OpenAdvisories
Unscored DLA-952-1 3 CVEs

kde4libs - security update

Published May 25, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 kde4libs 4:4.8.4-4+deb7u3

Vulnerabilities 3

  • Unscored —

    kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted requ…

  • Unscored —

    kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full ht…

  • Unscored —
    CVE-2017-8422 Public exploit

    KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…