Summary
Fabian Vogt discovered that Plasma Workspace did not properly authenticate
local clients connecting to the session manager. A local attacker could
possibly use this issue to execute arbitrary code as another user.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | plasma-workspace | 4:5.5.5.2-0ubuntu1.1+esm1 |
Vulnerabilities 1
-
High 7.3
KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via…
References
-
report
https://ubuntu.com/security/CVE-2024-36041