Summary
Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly
checked services invoking D-Bus. A local attacker could use this issue to
gain root privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | kde4libs | 4:4.13.3-0ubuntu0.5 |
Vulnerabilities 1
-
Unscored —CVE-2017-8422 Public exploit
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…
References
-
report
https://ubuntu.com/security/CVE-2017-8422