Summary
Itzik Kotler, Yonatan Fridburg, and Amit Klein discovered that KDE-Libs
incorrectly handled certain PAC files. A remote attacker could possibly use
this issue to obtain sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | kde4libs | 4:4.13.3-0ubuntu0.4 |
Vulnerabilities 1
-
Unscored —
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full ht…
References
-
report
https://ubuntu.com/security/CVE-2017-6410