Summary
It was discovered that kauth was using polkit in an unsafe manner. A local
attacker could possibly use this issue to bypass intended polkit
authorizations.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | kde4libs | 4:4.13.2a-0ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, whi…
References
-
report
https://ubuntu.com/security/CVE-2014-5033