Summary
It was discovered that KAuth incorrectly handled some configuration parameters
with specially crafted arbitrary types. An attacker could possibly use this
issue to cause a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | kauth | 5.18.0-0ubuntu2+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | kauth | 5.44.0-0ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DB…
References
-
report
https://ubuntu.com/security/CVE-2019-7443