Summary
Fabian Vogt discovered that Plasma Workspace incorrectly handled
connections via ICE. A local attacker could possibly use this issue to
gain access to another user's session manager and execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | plasma-workspace | 4:5.18.8-0ubuntu0.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | plasma-workspace | 4:5.24.7-0ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | plasma-workspace | 4:5.27.11-0ubuntu4.1 |
Vulnerabilities 1
-
High 7.3
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via…
References
-
report
https://ubuntu.com/security/CVE-2024-36041